CVE-2019-14469

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Aug 22, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-14475.4A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'MicrosofCVE-2019-144706.1cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/sCVE-2019-144716.1TestLink 1.9.19 has XSS via the error.php message parameter.CVE-2019-144726.1Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.CVE-2019-144738.8eQ-3 Homematic CCU2 and CCU3 use session IDs for authentication but lack authorization checks. Consequently, a valid guest level or user levCVE-2019-144747.5eQ-3 Homematic CCU3 3.47.15 and prior has Improper Input Validation in function 'Call()' of ReGa core logic process, resulting in the abilitCVE-2019-144757.5eQ-3 Homematic CCU2 2.47.15 and prior and CCU3 3.47.15 and prior use session IDs for authentication but lack authorization checks. An attackCVE-2019-144766.5AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server. Every user can trick the server CVE-2019-144775.5AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passworCVE-2019-144785.4AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client. The user's input data is not CVE-2019-144798.8AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code CVE-2019-14487.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka '
CVE-2019-14469: Medium severity, CVSS 5.4 | Vulnix