CVE-2019-14221

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 8, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-142229.8An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to AlfrCVE-2019-142236.1An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable toCVE-2019-142247.2An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, aCVE-2019-142255.4OX App Suite 7.10.1 and 7.10.2 allows SSRF.CVE-2019-142268.1OX App Suite through 7.10.2 has Insecure Permissions.CVE-2019-142276.1OX App Suite 7.10.1 and 7.10.2 allows XSS.CVE-2019-142286.1Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/inCVE-2019-14237.8An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'WindCVE-2019-142309.8An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id parameter in the setCVE-2019-142319.8An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the points parameter in theCVE-2019-142327.5An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If django.utils.text.Truncator's charsCVE-2019-142337.5An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying
CVE-2019-14221: Medium severity, CVSS 5.4 | Vulnix