CVE-2019-13070 - CVE House
Back to Database
Status published Medium CVE-2019-13070

A stored XSS vulnerability in the Agent/Center component of CyberPower...

Vulnerability Description

A stored XSS vulnerability in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows a privileged attacker to embed malicious JavaScript in the SNMP trap receivers form. Upon visiting the /agent/action_recipient Event Action/Recipient page, the embedded code will be executed in the browser of the victim.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13070

Credits & Attribution

No credits recorded in the NVD database.

References

More from cyberpowersystems

View All →
CVE-2019-13071
CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition...
High 8.8

Affected Vendor

cyberpowersystems

View all reports →

Affected Software

powerpanel
Vulnerable Versions:
3.4.0

Timeline

Official Publish: July 9th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.