CVE-2019-3414 - CVE House
Back to Database
Status published Medium CVE-2019-3414

All versions up to V1.19.20.02 of ZTE OTCP product are...

Vulnerability Description

All versions up to V1.19.20.02 of ZTE OTCP product are impacted by XSS vulnerability. Due to XSS, when an attacker invokes the security management to obtain the resources of the specified operation code owned by a user, the malicious script code could be transmitted in the parameter. If the front end does not process the returned result from the interface properly, the malicious script may be executed and the user cookie or other important information may be stolen.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3414

Credits & Attribution

No credits recorded in the NVD database.

References

More from ZTE

View All →
CVE-2025-66315
ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability
Medium 4.3
CVE-2025-66314
Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on...
High 7.5
CVE-2025-46583
DOS Vulnerability in ZTE MC889A Pro product
Medium 5.3
CVE-2025-46582
Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product
High 7.7
CVE-2025-46581
ZTE ZXCDN product has a Struts RCE Vulnerability
Critical 9.8

Affected Vendor

Affected Software

OTCP
Vulnerable Versions:
< 1.19.20.02

Timeline

Official Publish: July 22nd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.