Vulnerability Details CVE-2019-3413
All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.2%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2019-3413
-
cpe:2.3:h:zte:netnumen_dap:-
-
cpe:2.3:o:zte:netnumen_dap_firmware:20.18.40.r7.b1