High severity8.3NVD Advisory· Published Apr 17, 2019· Updated Jun 17, 2026

CVE-2019-3709

Description

IsilonSD Management Server 1.1.0 contains a cross-site scripting vulnerability while registering vCenter servers. A remote attacker can trick an admin user to potentially exploit this vulnerability to execute malicious HTML or JavaScript code in the context of the admin user.

Affected products

IsilonSD/IsilonSD Management Serverllm-create
Range: = 1.1.0
Dell EMC/Dell EMC IsilonSD Management Serverv5
Range: 1.1.0

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2019/Apr/16nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000