CVE-2019-16307

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-09-14 · updated 2026-06-17
Weakness: CWE-79

Description

A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter (webExMeetingLogin.jsp) and meetingKey parameter (deleteWebExMeetingCheck.jsp).

Affected products

Fujixerox Docushare: through 7.0.0.c1.609

References

https://gist.github.com/izadgot/3efc75f62f9c9567c8f11bad74165425
https://gist.github.com/izadgot/3efc75f62f9c9567c8f11bad74165425

Get alerted when CVE-2019-16307 or the next vulnerability affects your stack