Medium severity6.1NVD Advisory· Published Mar 6, 2019· Updated Jun 17, 2026
CVE-2019-9591
CVE-2019-9591
Description
A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500.0 allows remote attackers to inject arbitrary web script or HTML via the brandUrl parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <19.49.1500.0
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/152431/ShoreTel-Connect-ONSITE-Cross-Site-Scripting-Session-Fixation.htmlnvdExploitThird Party AdvisoryVDB Entry
- github.com/Ramikan/Vulnerabilities/blob/master/Shoretel%20Connect%20Multiple%20VulnerabilitynvdExploitThird Party Advisory
- www.exploit-db.com/exploits/46666/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.