CVE-2019-3562

MEDIUM

Oculus Browser 5.2.7-5.7.11 - HTML Injection via Remote Web Page

Title source: llm

Description

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://www.facebook.com/security/advisories/cve-2019-3562

Scores

CVSS v3 6.1

EPSS 0.0110

EPSS Percentile 61.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-74 CWE-79

Status published

Products (1)

oculus/oculus_browser 5.2.7 - 5.7.11

Published Apr 29, 2019

Tracked Since Feb 18, 2026