Vulnerability Details CVE-2019-17176
Genesys PureEngage Digital (eServices) 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp (ActionColor, ClientNickNameColor, Email, email, or email_address parameter).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2019-17176
-
cpe:2.3:a:genesys:eservices_chat:8.1.0
-
cpe:2.3:a:genesys:eservices_chat:8.1.200.03