CVEDB API

Dependency-Track before 3.5.1 allows XSS.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.2%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2019-1020007

Owasp » Dependency-Track » Version: N/A

cpe:2.3:a:owasp:dependency-track:-
Owasp » Dependency-Track » Version: 3.0.0

cpe:2.3:a:owasp:dependency-track:3.0.0
Owasp » Dependency-Track » Version: 3.0.1

cpe:2.3:a:owasp:dependency-track:3.0.1
Owasp » Dependency-Track » Version: 3.0.2

cpe:2.3:a:owasp:dependency-track:3.0.2
Owasp » Dependency-Track » Version: 3.0.3

cpe:2.3:a:owasp:dependency-track:3.0.3
Owasp » Dependency-Track » Version: 3.0.4

cpe:2.3:a:owasp:dependency-track:3.0.4
Owasp » Dependency-Track » Version: 3.1.0

cpe:2.3:a:owasp:dependency-track:3.1.0
Owasp » Dependency-Track » Version: 3.1.1

cpe:2.3:a:owasp:dependency-track:3.1.1
Owasp » Dependency-Track » Version: 3.2.0

cpe:2.3:a:owasp:dependency-track:3.2.0
Owasp » Dependency-Track » Version: 3.2.1

cpe:2.3:a:owasp:dependency-track:3.2.1
Owasp » Dependency-Track » Version: 3.2.2

cpe:2.3:a:owasp:dependency-track:3.2.2
Owasp » Dependency-Track » Version: 3.3.0

cpe:2.3:a:owasp:dependency-track:3.3.0
Owasp » Dependency-Track » Version: 3.3.1

cpe:2.3:a:owasp:dependency-track:3.3.1
Owasp » Dependency-Track » Version: 3.4.0

cpe:2.3:a:owasp:dependency-track:3.4.0
Owasp » Dependency-Track » Version: 3.4.1

cpe:2.3:a:owasp:dependency-track:3.4.1
Owasp » Dependency-Track » Version: 3.5.0

cpe:2.3:a:owasp:dependency-track:3.5.0