Vulnerability Details CVE-2018-19391
Cobham Satcom Sailor 250 and 500 devices before 1.25 contained persistent XSS, which could be exploited by an unauthenticated threat actor via the /index.lua?pageID=Phone%20book name field.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.5%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2018-19391
-
cpe:2.3:h:cobham:satcom_sailor_250:-
-
cpe:2.3:h:cobham:satcom_sailor_500:-
-
cpe:2.3:o:cobham:satcom_sailor_250_firmware:*
-
cpe:2.3:o:cobham:satcom_sailor_500_firmware:*