Medium severity4.7NVD Advisory· Published Nov 30, 2022· Updated Jun 17, 2026
CVE-2019-18265
CVE-2019-18265
Description
Digital Alert Systems’ DASDEC software prior to version 4.1 contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the SSH username, username field of the login page, or via the HTTP host header. The injected content is stored in logs and rendered when viewed in the web application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<4.1+ 1 more
- (no CPE)range: <4.1
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- www.digitalalertsystems.com/security-advisorynvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.