CVE-2019-1792— Cisco Umbrella Cross-Site Scripting Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-1792
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Umbrella Cross-Site Scripting Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the URL block page of Cisco Umbrella could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user in a network protected by Umbrella. The vulnerability is due to insufficient validation of input parameters passed to that page. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive browser-based information. This vulnerability has been fixed in the current version of Cisco Umbrella. Cisco Umbrella is a cloud service.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Umbrella 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Umbrella是美国思科（Cisco）公司的一套云安全平台。该平台能够预防网络钓鱼、恶意软件和勒索软件等网络威胁。 Cisco Umbrella中的URL block页面存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Umbrella | unspecified ~ n/a | - |
II. Public POCs for CVE-2019-1792
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1792
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-umbrella-xssvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2019-1792
Same Patch Batch · Cisco · 2019-04-18 · 23 CVEs total
| CVE-2019-1797 | Cisco Wireless LAN Controller Software Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1719 | Cisco Identity Services Engine Cross-Site Scripting Vulnerability | |
| CVE-2019-1722 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Cross-Site Reque | |
| CVE-2019-1721 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Servic | |
| CVE-2019-1720 | Cisco Expressway Series and Cisco TelePresence Video Communication Server Denial of Servic | |
| CVE-2019-1777 | Cisco Registered Envelope Service Stored Cross-Site Scripting Vulnerability | |
| CVE-2019-1725 | Cisco UCS B-Series Blade Servers Local Management CLI Arbitrary File Creation or CLI Param | |
| CVE-2019-1794 | Cisco Directory Connector Search Order Hijacking Vulnerability | |
| CVE-2019-1799 | Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili | |
| CVE-2019-1796 | Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili | |
| CVE-2019-1800 | Cisco Wireless LAN Controller Software IAPP Message Handling Denial of Service Vulnerabili | |
| CVE-2019-1841 | Cisco DNA Center Unintended Proxy Via SWIM Import Interface Vulnerability | |
| CVE-2019-1805 | Cisco Wireless LAN Controller Secure Shell Unauthorized Access Vulnerability | |
| CVE-2019-1802 | Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability | |
| CVE-2019-1830 | Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerabil | |
| CVE-2019-1829 | Cisco Aironet Series Access Points Command Injection Vulnerability | |
| CVE-2019-1826 | Cisco Aironet Series Access Points Quality of Service Denial of Service Vulnerability | |
| CVE-2019-1835 | Cisco Aironet Series Access Points Directory Traversal Vulnerability | |
| CVE-2019-1834 | Cisco Aironet Series Access Points Denial of Service Vulnerability | |
| CVE-2019-1831 | Cisco Email Security Appliance Content Filter Bypass Vulnerability |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Umbrella
- CVE-2020-3337
Cisco Umbrella Open Redirect Vulnerability - CVE-2020-3246
Cisco Umbrella Carriage Return Line Feed Injection Vulnerabi - CVE-2019-1807
Cisco Umbrella Dashboard Session Management Vulnerability - CVE-2018-0435
Cisco Umbrella API Unauthorized Access Vulnerability - CVE-2018-0437
Cisco Umbrella Enterprise Roaming Client and Enterprise Roam
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-79
- CVE-2026-8262
Devs Palace ERP Online chart-save cross site scripting - CVE-2026-8256
Devs Palace ERP Online mr-save cross site scripting - CVE-2026-8255
Devs Palace ERP Online add_new_customer cross site scripting - CVE-2026-8254
Devs Palace ERP Online sales_save cross site scripting - CVE-2026-8253
Devs Palace ERP Online purchase_save cross site scripting
V. Comments for CVE-2019-1792
No comments yet