6.1
CVSSv3

CVE-2019-6777

Published: 24/01/2019 Updated: 24/01/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

An issue exists in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

zoneminder zoneminder 1.32.3

Vendor Advisories

Debian Bug report logs - #920999 zoneminder: CVE-2019-6992 Package: src:zoneminder; Maintainer for src:zoneminder is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 31 Jan 2019 13:18:01 UTC Severity: grave Tags: fixed-upstream, security, upstream Found in version ...
Debian Bug report logs - #921001 zoneminder: CVE-2019-6990 Package: src:zoneminder; Maintainer for src:zoneminder is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 31 Jan 2019 13:21:05 UTC Severity: grave Tags: fixed-upstream, security, upstream Found in version ...
Debian Bug report logs - #921000 zoneminder: CVE-2019-6991 Package: src:zoneminder; Maintainer for src:zoneminder is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 31 Jan 2019 13:21:02 UTC Severity: grave Tags: fixed-upstream, security, upstream Found in version ...
Debian Bug report logs - #920375 zoneminder: CVE-2019-6777 Package: src:zoneminder; Maintainer for src:zoneminder is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 24 Jan 2019 20:39:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in ver ...