CVE-2019-9230

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.253. A cross-site scripting (XSS) vulnerability in the search function of the management web interface allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jul 18, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-92318.8An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions before 7.20A.202.CVE-2019-92327.5In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no adCVE-2019-92337.5In wpa_supplicant_8, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosuCVE-2019-92347.5In wpa_supplicant_8, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure CVE-2019-92355.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92365.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92376.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-92386.5In the NFC stack, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wiCVE-2019-92395.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92405.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additiCVE-2019-92417.5In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with noCVE-2019-92425.0In NFC, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additi
CVE-2019-9230: Medium severity, CVSS 6.1 | Vulnix