CVE-2019-16307

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter (webExMeetingLogin.jsp) and meetingKey parameter (deleteWebExMeetingCheck.jsp).

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Sep 14, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-163099.8FlameCMS 3.3.5 has SQL injection in account/login.php via accountName.CVE-2019-16315.3A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote CVE-2019-163105.4NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.CVE-2019-163118.8NIUSHOP V1.11 has CSRF via search_info to index.php.CVE-2019-163126.1s-cms V3.0 has XSS in index.php?type=text via the S_id parameter.CVE-2019-163137.5ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.CVE-2019-163149.8Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2.CVE-2019-163178.8In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter CVE-2019-163188.8In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonst CVE-2019-163197.5In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon dissector could go into an infinite loop. This was addressed in plugins/epan/gr CVE-2019-16328.0A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote a CVE-2019-163205.3Cobham Sea Tel v170 224521 through v194 225444 devices allow attackers to obtain potentially sensitive information, such as a vessel's latit