CVE-2019-18357

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2).

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 23, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-183595.5A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads CVE-2019-18367.1A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allowCVE-2019-183605.3In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery.CVE-2019-183615.3JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.CVE-2019-183625.3JetBrains MPS before 2019.2.2 exposed listening ports to the network.CVE-2019-183635.3In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstaCVE-2019-183649.8In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.CVE-2019-183654.3In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.CVE-2019-183665.3In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.CVE-2019-183675.3In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.CVE-2019-183687.3In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.CVE-2019-183695.3In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
CVE-2019-18357: Medium severity, CVSS 6.1 | Vulnix