CVE-2019-19547

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-13 · updated 2026-06-17
Weakness: CWE-79

Description

Symantec Endpoint Detection and Response (SEDR), prior to 4.3.0, may be susceptible to a cross site scripting (XSS) issue. XSS is a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. An XSS vulnerability may be used by attackers to potentially bypass access controls such as the same-origin policy.

Affected products

Fedoraproject Fedora: 30, 31
Symantec Endpoint Detection and Response: before 4.3.0 — fixed in 4.3.0

How to fix

Upgrade to a fixed version: Symantec Endpoint Detection and Response 4.3.0. Check the vendor advisory for mitigations.

References

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRQXCOVFWZIIMAZIAAFAVQGZOS7LGHXP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4NHRB4FUURQSTTEN/
https://support.symantec.com/us/en/article.SYMSA1502.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRQXCOVFWZIIMAZIAAFAVQGZOS7LGHXP/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQTOWEDFXDTGTD6D4NHRB4FUURQSTTEN/
https://support.symantec.com/us/en/article.SYMSA1502.html

Get alerted when CVE-2019-19547 or the next vulnerability affects your stack