VULNERABILITY INTELLIGENCE

CVE-2019-3776

CVSS score7.2 HIGH

EPSS probability0.85%

CISA KEVNot currently listed

Published2019-03-07

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L

Description

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser.

Weakness classification

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Primary references

security_alert@emc.com — Third Party Advisory, VDB Entry
security_alert@emc.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory