CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17495

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that <style>@import within the JSON data was a functional attack method.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.058

EPSS Ranking 90.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-17495

Oracle » Banking Apis » Version: 18.1

cpe:2.3:a:oracle:banking_apis:18.1
Oracle » Banking Apis » Version: 18.2

cpe:2.3:a:oracle:banking_apis:18.2
Oracle » Banking Apis » Version: 18.3

cpe:2.3:a:oracle:banking_apis:18.3
Oracle » Banking Apis » Version: 19.1

cpe:2.3:a:oracle:banking_apis:19.1
Oracle » Banking Apis » Version: 19.2

cpe:2.3:a:oracle:banking_apis:19.2
Oracle » Banking Apis » Version: 20.1

cpe:2.3:a:oracle:banking_apis:20.1
Oracle » Banking Apis » Version: 21.1

cpe:2.3:a:oracle:banking_apis:21.1
Oracle » Banking Digital Experience » Version: 18.1

cpe:2.3:a:oracle:banking_digital_experience:18.1
Oracle » Banking Digital Experience » Version: 18.2

cpe:2.3:a:oracle:banking_digital_experience:18.2
Oracle » Banking Digital Experience » Version: 18.3

cpe:2.3:a:oracle:banking_digital_experience:18.3
Oracle » Banking Digital Experience » Version: 19.1

cpe:2.3:a:oracle:banking_digital_experience:19.1
Oracle » Banking Digital Experience » Version: 19.2

cpe:2.3:a:oracle:banking_digital_experience:19.2
Oracle » Banking Digital Experience » Version: 20.1

cpe:2.3:a:oracle:banking_digital_experience:20.1
Oracle » Banking Digital Experience » Version: 21.1

cpe:2.3:a:oracle:banking_digital_experience:21.1
Oracle » Banking Platform » Version: 2.10.0

cpe:2.3:a:oracle:banking_platform:2.10.0
Oracle » Banking Platform » Version: 2.4.0

cpe:2.3:a:oracle:banking_platform:2.4.0
Oracle » Banking Platform » Version: 2.4.1

cpe:2.3:a:oracle:banking_platform:2.4.1
Oracle » Banking Platform » Version: 2.5.0

cpe:2.3:a:oracle:banking_platform:2.5.0
Oracle » Banking Platform » Version: 2.6.0

cpe:2.3:a:oracle:banking_platform:2.6.0
Oracle » Banking Platform » Version: 2.6.1

cpe:2.3:a:oracle:banking_platform:2.6.1
Oracle » Banking Platform » Version: 2.6.2

cpe:2.3:a:oracle:banking_platform:2.6.2
Oracle » Banking Platform » Version: 2.7.0

cpe:2.3:a:oracle:banking_platform:2.7.0
Oracle » Banking Platform » Version: 2.7.1

cpe:2.3:a:oracle:banking_platform:2.7.1
Oracle » Banking Platform » Version: 2.8.0

cpe:2.3:a:oracle:banking_platform:2.8.0
Oracle » Banking Platform » Version: 2.9.0

cpe:2.3:a:oracle:banking_platform:2.9.0
Oracle » Primavera Gateway » Version: 16.2.0

cpe:2.3:a:oracle:primavera_gateway:16.2.0
Oracle » Primavera Gateway » Version: 16.2.11

cpe:2.3:a:oracle:primavera_gateway:16.2.11
Oracle » Primavera Gateway » Version: 17.12.0

cpe:2.3:a:oracle:primavera_gateway:17.12.0
Oracle » Primavera Gateway » Version: 17.12.6

cpe:2.3:a:oracle:primavera_gateway:17.12.6
Oracle » Primavera Gateway » Version: 17.12.7

cpe:2.3:a:oracle:primavera_gateway:17.12.7
Oracle » Primavera Gateway » Version: 17.12.8

cpe:2.3:a:oracle:primavera_gateway:17.12.8
Oracle » Utilities Framework » Version: 4.3.0.6.0

cpe:2.3:a:oracle:utilities_framework:4.3.0.6.0
Oracle » Utilities Framework » Version: 4.4.0.0.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0
Oracle » Utilities Framework » Version: 4.4.0.2.0

cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0
Smartbear » Swagger Ui » Version: 1.0

cpe:2.3:a:smartbear:swagger_ui:1.0
Smartbear » Swagger Ui » Version: 1.0.1

cpe:2.3:a:smartbear:swagger_ui:1.0.1
Smartbear » Swagger Ui » Version: 1.0.12

cpe:2.3:a:smartbear:swagger_ui:1.0.12
Smartbear » Swagger Ui » Version: 1.0.13

cpe:2.3:a:smartbear:swagger_ui:1.0.13
Smartbear » Swagger Ui » Version: 1.1.1

cpe:2.3:a:smartbear:swagger_ui:1.1.1
Smartbear » Swagger Ui » Version: 1.1.15

cpe:2.3:a:smartbear:swagger_ui:1.1.15
Smartbear » Swagger Ui » Version: 1.1.3

cpe:2.3:a:smartbear:swagger_ui:1.1.3
Smartbear » Swagger Ui » Version: 1.1.4

cpe:2.3:a:smartbear:swagger_ui:1.1.4
Smartbear » Swagger Ui » Version: 1.1.5

cpe:2.3:a:smartbear:swagger_ui:1.1.5
Smartbear » Swagger Ui » Version: 1.1.6

cpe:2.3:a:smartbear:swagger_ui:1.1.6
Smartbear » Swagger Ui » Version: 1.1.7

cpe:2.3:a:smartbear:swagger_ui:1.1.7
Smartbear » Swagger Ui » Version: 2.0.0

cpe:2.3:a:smartbear:swagger_ui:2.0.0
Smartbear » Swagger Ui » Version: 2.0.1

cpe:2.3:a:smartbear:swagger_ui:2.0.1
Smartbear » Swagger Ui » Version: 2.0.10

cpe:2.3:a:smartbear:swagger_ui:2.0.10
Smartbear » Swagger Ui » Version: 2.0.11

cpe:2.3:a:smartbear:swagger_ui:2.0.11
Smartbear » Swagger Ui » Version: 2.0.12

cpe:2.3:a:smartbear:swagger_ui:2.0.12
Smartbear » Swagger Ui » Version: 2.0.14

cpe:2.3:a:smartbear:swagger_ui:2.0.14
Smartbear » Swagger Ui » Version: 2.0.15

cpe:2.3:a:smartbear:swagger_ui:2.0.15
Smartbear » Swagger Ui » Version: 2.0.16

cpe:2.3:a:smartbear:swagger_ui:2.0.16
Smartbear » Swagger Ui » Version: 2.0.17

cpe:2.3:a:smartbear:swagger_ui:2.0.17
Smartbear » Swagger Ui » Version: 2.0.18

cpe:2.3:a:smartbear:swagger_ui:2.0.18
Smartbear » Swagger Ui » Version: 2.0.19

cpe:2.3:a:smartbear:swagger_ui:2.0.19
Smartbear » Swagger Ui » Version: 2.0.2

cpe:2.3:a:smartbear:swagger_ui:2.0.2
Smartbear » Swagger Ui » Version: 2.0.20

cpe:2.3:a:smartbear:swagger_ui:2.0.20
Smartbear » Swagger Ui » Version: 2.0.21

cpe:2.3:a:smartbear:swagger_ui:2.0.21
Smartbear » Swagger Ui » Version: 2.0.22

cpe:2.3:a:smartbear:swagger_ui:2.0.22
Smartbear » Swagger Ui » Version: 2.0.24

cpe:2.3:a:smartbear:swagger_ui:2.0.24
Smartbear » Swagger Ui » Version: 2.0.3

cpe:2.3:a:smartbear:swagger_ui:2.0.3
Smartbear » Swagger Ui » Version: 2.0.4

cpe:2.3:a:smartbear:swagger_ui:2.0.4
Smartbear » Swagger Ui » Version: 2.0.7

cpe:2.3:a:smartbear:swagger_ui:2.0.7
Smartbear » Swagger Ui » Version: 2.0.8

cpe:2.3:a:smartbear:swagger_ui:2.0.8
Smartbear » Swagger Ui » Version: 2.0.9

cpe:2.3:a:smartbear:swagger_ui:2.0.9
Smartbear » Swagger Ui » Version: 2.1.0

cpe:2.3:a:smartbear:swagger_ui:2.1.0
Smartbear » Swagger Ui » Version: 2.2.0

cpe:2.3:a:smartbear:swagger_ui:2.2.0
Smartbear » Swagger Ui » Version: 2.2.1

cpe:2.3:a:smartbear:swagger_ui:2.2.1
Smartbear » Swagger Ui » Version: 2.2.10

cpe:2.3:a:smartbear:swagger_ui:2.2.10
Smartbear » Swagger Ui » Version: 2.2.2

cpe:2.3:a:smartbear:swagger_ui:2.2.2
Smartbear » Swagger Ui » Version: 2.2.3

cpe:2.3:a:smartbear:swagger_ui:2.2.3
Smartbear » Swagger Ui » Version: 2.2.4

cpe:2.3:a:smartbear:swagger_ui:2.2.4
Smartbear » Swagger Ui » Version: 2.2.5

cpe:2.3:a:smartbear:swagger_ui:2.2.5
Smartbear » Swagger Ui » Version: 2.2.6

cpe:2.3:a:smartbear:swagger_ui:2.2.6
Smartbear » Swagger Ui » Version: 2.2.7

cpe:2.3:a:smartbear:swagger_ui:2.2.7
Smartbear » Swagger Ui » Version: 2.2.8

cpe:2.3:a:smartbear:swagger_ui:2.2.8
Smartbear » Swagger Ui » Version: 2.2.9

cpe:2.3:a:smartbear:swagger_ui:2.2.9
Smartbear » Swagger Ui » Version: 3.0.0

cpe:2.3:a:smartbear:swagger_ui:3.0.0
Smartbear » Swagger Ui » Version: 3.0.1

cpe:2.3:a:smartbear:swagger_ui:3.0.1
Smartbear » Swagger Ui » Version: 3.0.10

cpe:2.3:a:smartbear:swagger_ui:3.0.10
Smartbear » Swagger Ui » Version: 3.0.11

cpe:2.3:a:smartbear:swagger_ui:3.0.11
Smartbear » Swagger Ui » Version: 3.0.12

cpe:2.3:a:smartbear:swagger_ui:3.0.12
Smartbear » Swagger Ui » Version: 3.0.13

cpe:2.3:a:smartbear:swagger_ui:3.0.13
Smartbear » Swagger Ui » Version: 3.0.14

cpe:2.3:a:smartbear:swagger_ui:3.0.14
Smartbear » Swagger Ui » Version: 3.0.15

cpe:2.3:a:smartbear:swagger_ui:3.0.15
Smartbear » Swagger Ui » Version: 3.0.16

cpe:2.3:a:smartbear:swagger_ui:3.0.16
Smartbear » Swagger Ui » Version: 3.0.17

cpe:2.3:a:smartbear:swagger_ui:3.0.17
Smartbear » Swagger Ui » Version: 3.0.18

cpe:2.3:a:smartbear:swagger_ui:3.0.18
Smartbear » Swagger Ui » Version: 3.0.19

cpe:2.3:a:smartbear:swagger_ui:3.0.19
Smartbear » Swagger Ui » Version: 3.0.2

cpe:2.3:a:smartbear:swagger_ui:3.0.2
Smartbear » Swagger Ui » Version: 3.0.20

cpe:2.3:a:smartbear:swagger_ui:3.0.20
Smartbear » Swagger Ui » Version: 3.0.21

cpe:2.3:a:smartbear:swagger_ui:3.0.21
Smartbear » Swagger Ui » Version: 3.0.3

cpe:2.3:a:smartbear:swagger_ui:3.0.3
Smartbear » Swagger Ui » Version: 3.0.4

cpe:2.3:a:smartbear:swagger_ui:3.0.4
Smartbear » Swagger Ui » Version: 3.0.5

cpe:2.3:a:smartbear:swagger_ui:3.0.5
Smartbear » Swagger Ui » Version: 3.0.6

cpe:2.3:a:smartbear:swagger_ui:3.0.6
Smartbear » Swagger Ui » Version: 3.0.7

cpe:2.3:a:smartbear:swagger_ui:3.0.7
Smartbear » Swagger Ui » Version: 3.0.8

cpe:2.3:a:smartbear:swagger_ui:3.0.8
Smartbear » Swagger Ui » Version: 3.0.9

cpe:2.3:a:smartbear:swagger_ui:3.0.9
Smartbear » Swagger Ui » Version: 3.1.0

cpe:2.3:a:smartbear:swagger_ui:3.1.0
Smartbear » Swagger Ui » Version: 3.1.1

cpe:2.3:a:smartbear:swagger_ui:3.1.1
Smartbear » Swagger Ui » Version: 3.1.2

cpe:2.3:a:smartbear:swagger_ui:3.1.2
Smartbear » Swagger Ui » Version: 3.1.3

cpe:2.3:a:smartbear:swagger_ui:3.1.3
Smartbear » Swagger Ui » Version: 3.1.4

cpe:2.3:a:smartbear:swagger_ui:3.1.4
Smartbear » Swagger Ui » Version: 3.1.5

cpe:2.3:a:smartbear:swagger_ui:3.1.5
Smartbear » Swagger Ui » Version: 3.1.6

cpe:2.3:a:smartbear:swagger_ui:3.1.6
Smartbear » Swagger Ui » Version: 3.1.7

cpe:2.3:a:smartbear:swagger_ui:3.1.7
Smartbear » Swagger Ui » Version: 3.10.0

cpe:2.3:a:smartbear:swagger_ui:3.10.0
Smartbear » Swagger Ui » Version: 3.11.0

cpe:2.3:a:smartbear:swagger_ui:3.11.0
Smartbear » Swagger Ui » Version: 3.12.0

cpe:2.3:a:smartbear:swagger_ui:3.12.0
Smartbear » Swagger Ui » Version: 3.12.1

cpe:2.3:a:smartbear:swagger_ui:3.12.1
Smartbear » Swagger Ui » Version: 3.13.0

cpe:2.3:a:smartbear:swagger_ui:3.13.0
Smartbear » Swagger Ui » Version: 3.13.1

cpe:2.3:a:smartbear:swagger_ui:3.13.1
Smartbear » Swagger Ui » Version: 3.13.2

cpe:2.3:a:smartbear:swagger_ui:3.13.2
Smartbear » Swagger Ui » Version: 3.13.3

cpe:2.3:a:smartbear:swagger_ui:3.13.3
Smartbear » Swagger Ui » Version: 3.13.4

cpe:2.3:a:smartbear:swagger_ui:3.13.4
Smartbear » Swagger Ui » Version: 3.13.5

cpe:2.3:a:smartbear:swagger_ui:3.13.5
Smartbear » Swagger Ui » Version: 3.13.6

cpe:2.3:a:smartbear:swagger_ui:3.13.6
Smartbear » Swagger Ui » Version: 3.14.0

cpe:2.3:a:smartbear:swagger_ui:3.14.0
Smartbear » Swagger Ui » Version: 3.14.1

cpe:2.3:a:smartbear:swagger_ui:3.14.1
Smartbear » Swagger Ui » Version: 3.14.2

cpe:2.3:a:smartbear:swagger_ui:3.14.2
Smartbear » Swagger Ui » Version: 3.15.0

cpe:2.3:a:smartbear:swagger_ui:3.15.0
Smartbear » Swagger Ui » Version: 3.16.0

cpe:2.3:a:smartbear:swagger_ui:3.16.0
Smartbear » Swagger Ui » Version: 3.17.0

cpe:2.3:a:smartbear:swagger_ui:3.17.0
Smartbear » Swagger Ui » Version: 3.17.1

cpe:2.3:a:smartbear:swagger_ui:3.17.1
Smartbear » Swagger Ui » Version: 3.17.2

cpe:2.3:a:smartbear:swagger_ui:3.17.2
Smartbear » Swagger Ui » Version: 3.17.3

cpe:2.3:a:smartbear:swagger_ui:3.17.3
Smartbear » Swagger Ui » Version: 3.17.4

cpe:2.3:a:smartbear:swagger_ui:3.17.4
Smartbear » Swagger Ui » Version: 3.17.5

cpe:2.3:a:smartbear:swagger_ui:3.17.5
Smartbear » Swagger Ui » Version: 3.17.6

cpe:2.3:a:smartbear:swagger_ui:3.17.6
Smartbear » Swagger Ui » Version: 3.18.0

cpe:2.3:a:smartbear:swagger_ui:3.18.0
Smartbear » Swagger Ui » Version: 3.18.1

cpe:2.3:a:smartbear:swagger_ui:3.18.1
Smartbear » Swagger Ui » Version: 3.18.2

cpe:2.3:a:smartbear:swagger_ui:3.18.2
Smartbear » Swagger Ui » Version: 3.18.3

cpe:2.3:a:smartbear:swagger_ui:3.18.3
Smartbear » Swagger Ui » Version: 3.18.4

cpe:2.3:a:smartbear:swagger_ui:3.18.4
Smartbear » Swagger Ui » Version: 3.19.0

cpe:2.3:a:smartbear:swagger_ui:3.19.0
Smartbear » Swagger Ui » Version: 3.19.1

cpe:2.3:a:smartbear:swagger_ui:3.19.1
Smartbear » Swagger Ui » Version: 3.19.2

cpe:2.3:a:smartbear:swagger_ui:3.19.2
Smartbear » Swagger Ui » Version: 3.19.3

cpe:2.3:a:smartbear:swagger_ui:3.19.3
Smartbear » Swagger Ui » Version: 3.19.4

cpe:2.3:a:smartbear:swagger_ui:3.19.4
Smartbear » Swagger Ui » Version: 3.19.5

cpe:2.3:a:smartbear:swagger_ui:3.19.5
Smartbear » Swagger Ui » Version: 3.2.0

cpe:2.3:a:smartbear:swagger_ui:3.2.0
Smartbear » Swagger Ui » Version: 3.2.1

cpe:2.3:a:smartbear:swagger_ui:3.2.1
Smartbear » Swagger Ui » Version: 3.2.2

cpe:2.3:a:smartbear:swagger_ui:3.2.2
Smartbear » Swagger Ui » Version: 3.20.0

cpe:2.3:a:smartbear:swagger_ui:3.20.0
Smartbear » Swagger Ui » Version: 3.20.1

cpe:2.3:a:smartbear:swagger_ui:3.20.1
Smartbear » Swagger Ui » Version: 3.20.2

cpe:2.3:a:smartbear:swagger_ui:3.20.2
Smartbear » Swagger Ui » Version: 3.20.3

cpe:2.3:a:smartbear:swagger_ui:3.20.3
Smartbear » Swagger Ui » Version: 3.20.4

cpe:2.3:a:smartbear:swagger_ui:3.20.4
Smartbear » Swagger Ui » Version: 3.20.5

cpe:2.3:a:smartbear:swagger_ui:3.20.5
Smartbear » Swagger Ui » Version: 3.20.6

cpe:2.3:a:smartbear:swagger_ui:3.20.6
Smartbear » Swagger Ui » Version: 3.20.7

cpe:2.3:a:smartbear:swagger_ui:3.20.7
Smartbear » Swagger Ui » Version: 3.20.8

cpe:2.3:a:smartbear:swagger_ui:3.20.8
Smartbear » Swagger Ui » Version: 3.20.9

cpe:2.3:a:smartbear:swagger_ui:3.20.9
Smartbear » Swagger Ui » Version: 3.21.0

cpe:2.3:a:smartbear:swagger_ui:3.21.0
Smartbear » Swagger Ui » Version: 3.22.0

cpe:2.3:a:smartbear:swagger_ui:3.22.0
Smartbear » Swagger Ui » Version: 3.22.1

cpe:2.3:a:smartbear:swagger_ui:3.22.1
Smartbear » Swagger Ui » Version: 3.22.2

cpe:2.3:a:smartbear:swagger_ui:3.22.2
Smartbear » Swagger Ui » Version: 3.22.3

cpe:2.3:a:smartbear:swagger_ui:3.22.3
Smartbear » Swagger Ui » Version: 3.23.0

cpe:2.3:a:smartbear:swagger_ui:3.23.0
Smartbear » Swagger Ui » Version: 3.23.1

cpe:2.3:a:smartbear:swagger_ui:3.23.1
Smartbear » Swagger Ui » Version: 3.23.10

cpe:2.3:a:smartbear:swagger_ui:3.23.10
Smartbear » Swagger Ui » Version: 3.23.2

cpe:2.3:a:smartbear:swagger_ui:3.23.2
Smartbear » Swagger Ui » Version: 3.23.3

cpe:2.3:a:smartbear:swagger_ui:3.23.3
Smartbear » Swagger Ui » Version: 3.23.4

cpe:2.3:a:smartbear:swagger_ui:3.23.4
Smartbear » Swagger Ui » Version: 3.23.5

cpe:2.3:a:smartbear:swagger_ui:3.23.5
Smartbear » Swagger Ui » Version: 3.23.6

cpe:2.3:a:smartbear:swagger_ui:3.23.6
Smartbear » Swagger Ui » Version: 3.23.7

cpe:2.3:a:smartbear:swagger_ui:3.23.7
Smartbear » Swagger Ui » Version: 3.23.8

cpe:2.3:a:smartbear:swagger_ui:3.23.8
Smartbear » Swagger Ui » Version: 3.23.9

cpe:2.3:a:smartbear:swagger_ui:3.23.9
Smartbear » Swagger Ui » Version: 3.3.0

cpe:2.3:a:smartbear:swagger_ui:3.3.0
Smartbear » Swagger Ui » Version: 3.3.1

cpe:2.3:a:smartbear:swagger_ui:3.3.1
Smartbear » Swagger Ui » Version: 3.3.2

cpe:2.3:a:smartbear:swagger_ui:3.3.2
Smartbear » Swagger Ui » Version: 3.4.0

cpe:2.3:a:smartbear:swagger_ui:3.4.0
Smartbear » Swagger Ui » Version: 3.4.1

cpe:2.3:a:smartbear:swagger_ui:3.4.1
Smartbear » Swagger Ui » Version: 3.4.2

cpe:2.3:a:smartbear:swagger_ui:3.4.2
Smartbear » Swagger Ui » Version: 3.4.3

cpe:2.3:a:smartbear:swagger_ui:3.4.3
Smartbear » Swagger Ui » Version: 3.4.4

cpe:2.3:a:smartbear:swagger_ui:3.4.4
Smartbear » Swagger Ui » Version: 3.4.5

cpe:2.3:a:smartbear:swagger_ui:3.4.5
Smartbear » Swagger Ui » Version: 3.5.0

cpe:2.3:a:smartbear:swagger_ui:3.5.0
Smartbear » Swagger Ui » Version: 3.6.0

cpe:2.3:a:smartbear:swagger_ui:3.6.0
Smartbear » Swagger Ui » Version: 3.6.1

cpe:2.3:a:smartbear:swagger_ui:3.6.1
Smartbear » Swagger Ui » Version: 3.7.0

cpe:2.3:a:smartbear:swagger_ui:3.7.0
Smartbear » Swagger Ui » Version: 3.8.0

cpe:2.3:a:smartbear:swagger_ui:3.8.0
Smartbear » Swagger Ui » Version: 3.8.1

cpe:2.3:a:smartbear:swagger_ui:3.8.1
Smartbear » Swagger Ui » Version: 3.9.0

cpe:2.3:a:smartbear:swagger_ui:3.9.0
Smartbear » Swagger Ui » Version: 3.9.1

cpe:2.3:a:smartbear:swagger_ui:3.9.1
Smartbear » Swagger Ui » Version: 3.9.2

cpe:2.3:a:smartbear:swagger_ui:3.9.2
Smartbear » Swagger Ui » Version: 3.9.3

cpe:2.3:a:smartbear:swagger_ui:3.9.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-17495

Products

Pricing

Contact Us