High severity8.3NVD Advisory· Published Apr 17, 2019· Updated Jun 17, 2026
CVE-2019-3709
CVE-2019-3709
Description
IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while registering vCenter servers. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.
Affected products
3- Range: = 1.1.0
cpe:2.3:a:dell:emc_isilonsd_management_server:1.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dell:emc_isilonsd_management_server:1.1.0:*:*:*:*:*:*:*
- (no CPE)range: 1.1.0
Patches
Vulnerability mechanics
References
1- seclists.org/fulldisclosure/2019/Apr/16nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.