What’s Vulnerable › Vulnerabilities

CVE-2019-3490

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-02 · updated 2026-06-17
• Weakness: CWE-79

Description

A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.

Affected products

• OES Netstorage component of Open Enterprise Server: 2015.1, 2018.0, 2018.1

References

• https://support.microfocus.com/kb/doc.php?id=7023828
• https://support.microfocus.com/kb/doc.php?id=7023828

Get alerted when CVE-2019-3490 or the next vulnerability affects your stack