Medium severity6.1NVD Advisory· Published Mar 6, 2019· Updated Jun 17, 2026
CVE-2019-9592
CVE-2019-9592
Description
A reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:mitel:connect_onsite:19.45.1602.0:*:*:*:*:*:*:*
- Range: 19.45.1602.0
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/152431/ShoreTel-Connect-ONSITE-Cross-Site-Scripting-Session-Fixation.htmlnvdExploitThird Party AdvisoryVDB Entry
- github.com/Ramikan/Vulnerabilities/blob/master/Shoretel%20Connect%20Multiple%20VulnerabilitynvdExploitThird Party Advisory
- www.exploit-db.com/exploits/46666/nvdExploitThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.