Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-7677

XSS exists in Enphase Envoy R3.*.* via the profileName parameter to the /home URI on TCP port 8888.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2019-7677
  • Enphase » Envoy » Version: 3.0.0
    cpe:2.3:a:enphase:envoy:3.0.0
  • Enphase » Envoy » Version: 3.5.0
    cpe:2.3:a:enphase:envoy:3.5.0
  • Enphase » Envoy » Version: 3.6.0
    cpe:2.3:a:enphase:envoy:3.6.0
  • Enphase » Envoy » Version: 3.7.0
    cpe:2.3:a:enphase:envoy:3.7.0
  • Enphase » Envoy » Version: 3.8.0
    cpe:2.3:a:enphase:envoy:3.8.0
  • Enphase » Envoy » Version: 3.9.0
    cpe:2.3:a:enphase:envoy:3.9.0


Contact Us

Shodan ® - All rights reserved