CVE-2019-18648

MEDIUM

Untangle NG Firewall 14.2.0 - Authenticated Reflected Cross-Site Scripting

Title source: llm
STIX 2.1

Description

When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.

References (1)

Core 1
Core References

Scores

CVSS v3 4.8
EPSS 0.0052
EPSS Percentile 41.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
untangle/ng_firewall 14.2.0
Published Nov 14, 2019
Tracked Since Feb 18, 2026