Home > Vulnerability Database > CVE-2019-11715

Mend.io Vulnerability Database

CVE-2019-11715

Date: July 23, 2019

Due to an error while parsing page content, it is possible for properly sanitized user input to be misinterpreted and lead to XSS hazards on web sites in certain circumstances. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.

Language: Unix

Severity Score

5.0

Related Resources (19)

Url: https://security.alpinelinux.org/vuln/CVE-2019-11715

Url: https://www.mozilla.org/security/advisories/mfsa2019-21/

Url: https://security.gentoo.org/glsa/201908-20

Url: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00009.html

Url: https://www.mozilla.org/security/advisories/mfsa2019-23/

Url: https://www.mozilla.org/security/advisories/mfsa2019-22/

Url: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00073.html

Url: https://security.gentoo.org/glsa/201908-12

Url: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00055.html

Url: https://lists.debian.org/debian-lts-announce/2019/08/msg00002.html

Url: https://bugzilla.mozilla.org/show_bug.cgi?id=1555523

Url: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00058.html

Url: https://security-tracker.debian.org/tracker/CVE-2019-11715

Url: https://access.redhat.com/security/cve/CVE-2019-11715

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2019-11715

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-11715

Url: http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00010.html

Url: https://lists.debian.org/debian-lts-announce/2019/08/msg00001.html

Url: https://www.mend.io/vulnerability-database/CVE-2019-11715

Severity Score

5.0

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

CVSS v3

Base Score:	5.0
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE

CVSS v2

Base Score:	8.3
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2019-11715

Date: July 23, 2019

Language: Unix

Severity Score

Related Resources (19)

Severity Score

Weakness Type (CWE)

CVSS v3

CVSS v2

Do you need more information?