What’s Vulnerable › Vulnerabilities

CVE-2019-17176

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-11 · updated 2026-06-17
• Weakness: CWE-79

Description

Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email_address parameter).

Affected products

• Genesys Eservices Chat: from 8.1.0 through 8.1.200.03

References

• https://gist.github.com/MortalP0ison/5fd584b4c85fa13281fdc918913446fa
• https://gist.github.com/MortalP0ison/5fd584b4c85fa13281fdc918913446fa

Get alerted when CVE-2019-17176 or the next vulnerability affects your stack