Medium severity5.4NVD Advisory· Published Feb 15, 2026· Updated Apr 15, 2026

CVE-2019-25367

Description

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users' browsers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alfresco/Community Editionllm-fuzzy
Range: = 3.4.2-1

Patches

Vulnerability mechanics

References

www.arangodb.comnvd
www.exploit-db.com/exploits/46407nvd
www.vulncheck.com/advisories/arangodb-community-edition-xss-via-aardvark-adminnvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000