CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-8953

The HAProxy package before 0.59_16 for pfSense has XSS via the desc (aka Description) or table_actionsaclN parameter, related to haproxy_listeners.php and haproxy_listeners_edit.php.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.768

EPSS Ranking 98.9%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-8953

Netgate » Haproxy » Version: 0.01

cpe:2.3:a:netgate:haproxy:0.01
Netgate » Haproxy » Version: 0.15

cpe:2.3:a:netgate:haproxy:0.15
Netgate » Haproxy » Version: 0.16

cpe:2.3:a:netgate:haproxy:0.16
Netgate » Haproxy » Version: 0.18

cpe:2.3:a:netgate:haproxy:0.18
Netgate » Haproxy » Version: 0.19

cpe:2.3:a:netgate:haproxy:0.19
Netgate » Haproxy » Version: 0.21

cpe:2.3:a:netgate:haproxy:0.21
Netgate » Haproxy » Version: 0.22

cpe:2.3:a:netgate:haproxy:0.22
Netgate » Haproxy » Version: 0.23

cpe:2.3:a:netgate:haproxy:0.23
Netgate » Haproxy » Version: 0.24

cpe:2.3:a:netgate:haproxy:0.24
Netgate » Haproxy » Version: 0.25

cpe:2.3:a:netgate:haproxy:0.25
Netgate » Haproxy » Version: 0.26

cpe:2.3:a:netgate:haproxy:0.26
Netgate » Haproxy » Version: 0.27

cpe:2.3:a:netgate:haproxy:0.27
Netgate » Haproxy » Version: 0.28

cpe:2.3:a:netgate:haproxy:0.28
Netgate » Haproxy » Version: 0.29

cpe:2.3:a:netgate:haproxy:0.29
Netgate » Haproxy » Version: 0.59.2

cpe:2.3:a:netgate:haproxy:0.59.2
Netgate » Haproxy » Version: 0.59_5

cpe:2.3:a:netgate:haproxy:0.59_5
Netgate » Haproxy » Version: 0.59_7

cpe:2.3:a:netgate:haproxy:0.59_7
Netgate » Haproxy » Version: 0.59_9

cpe:2.3:a:netgate:haproxy:0.59_9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-8953

Products

Pricing

Contact Us