CVE-2019-16307

A Reflected Cross-Site Scripting (XSS) vulnerability in the webEx module in webExMeetingLogin.jsp and deleteWebExMeetingCheck.jsp in Fuji Xerox DocuShare through 7.0.0.C1.609 allows remote attackers to inject arbitrary web script or HTML via the handle parameter (webExMeetingLogin.jsp) and meetingKey parameter (deleteWebExMeetingCheck.jsp).

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.14% chance of exploitation in the next 30 days, 64th percentile

Published

2019-09-14

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://gist.github.com/izadgot/3efc75f62f9c9567c8f11bad74165425

References

• CVE Record
• NVD entry

Related

• CVE-2019-16303
• CVE-2019-16313
• CVE-2019-16295
• CVE-2019-16326
• CVE-2019-16294
• CVE-2019-16327