CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10785

dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. This is due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 47.7%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-10785

Linuxfoundation » Dojox » Version: 1.11.0

cpe:2.3:a:linuxfoundation:dojox:1.11.0
Linuxfoundation » Dojox » Version: 1.11.1

cpe:2.3:a:linuxfoundation:dojox:1.11.1
Linuxfoundation » Dojox » Version: 1.11.2

cpe:2.3:a:linuxfoundation:dojox:1.11.2
Linuxfoundation » Dojox » Version: 1.11.3

cpe:2.3:a:linuxfoundation:dojox:1.11.3
Linuxfoundation » Dojox » Version: 1.11.4

cpe:2.3:a:linuxfoundation:dojox:1.11.4
Linuxfoundation » Dojox » Version: 1.11.5

cpe:2.3:a:linuxfoundation:dojox:1.11.5
Linuxfoundation » Dojox » Version: 1.11.6

cpe:2.3:a:linuxfoundation:dojox:1.11.6
Linuxfoundation » Dojox » Version: 1.11.7

cpe:2.3:a:linuxfoundation:dojox:1.11.7
Linuxfoundation » Dojox » Version: 1.11.8

cpe:2.3:a:linuxfoundation:dojox:1.11.8
Linuxfoundation » Dojox » Version: 1.12.0

cpe:2.3:a:linuxfoundation:dojox:1.12.0
Linuxfoundation » Dojox » Version: 1.12.1

cpe:2.3:a:linuxfoundation:dojox:1.12.1
Linuxfoundation » Dojox » Version: 1.12.2

cpe:2.3:a:linuxfoundation:dojox:1.12.2
Linuxfoundation » Dojox » Version: 1.12.3

cpe:2.3:a:linuxfoundation:dojox:1.12.3
Linuxfoundation » Dojox » Version: 1.12.4

cpe:2.3:a:linuxfoundation:dojox:1.12.4
Linuxfoundation » Dojox » Version: 1.12.5

cpe:2.3:a:linuxfoundation:dojox:1.12.5
Linuxfoundation » Dojox » Version: 1.12.6

cpe:2.3:a:linuxfoundation:dojox:1.12.6
Linuxfoundation » Dojox » Version: 1.13.0

cpe:2.3:a:linuxfoundation:dojox:1.13.0
Linuxfoundation » Dojox » Version: 1.13.1

cpe:2.3:a:linuxfoundation:dojox:1.13.1
Linuxfoundation » Dojox » Version: 1.13.2

cpe:2.3:a:linuxfoundation:dojox:1.13.2
Linuxfoundation » Dojox » Version: 1.13.3

cpe:2.3:a:linuxfoundation:dojox:1.13.3
Linuxfoundation » Dojox » Version: 1.13.4

cpe:2.3:a:linuxfoundation:dojox:1.13.4
Linuxfoundation » Dojox » Version: 1.13.5

cpe:2.3:a:linuxfoundation:dojox:1.13.5
Linuxfoundation » Dojox » Version: 1.14.0

cpe:2.3:a:linuxfoundation:dojox:1.14.0
Linuxfoundation » Dojox » Version: 1.14.1

cpe:2.3:a:linuxfoundation:dojox:1.14.1
Linuxfoundation » Dojox » Version: 1.14.2

cpe:2.3:a:linuxfoundation:dojox:1.14.2
Linuxfoundation » Dojox » Version: 1.14.3

cpe:2.3:a:linuxfoundation:dojox:1.14.3
Linuxfoundation » Dojox » Version: 1.14.4

cpe:2.3:a:linuxfoundation:dojox:1.14.4
Linuxfoundation » Dojox » Version: 1.15.0

cpe:2.3:a:linuxfoundation:dojox:1.15.0
Linuxfoundation » Dojox » Version: 1.15.1

cpe:2.3:a:linuxfoundation:dojox:1.15.1
Linuxfoundation » Dojox » Version: 1.16.0

cpe:2.3:a:linuxfoundation:dojox:1.16.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10785

Products

Pricing

Contact Us