CVE-2019-19632

Published: Jan 24, 2020Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. An unauthenticated attacker may inject stored arbitrary JavaScript (XSS), and execute it in the content of authenticated administrators.

Affected (9)

Products: Bigswitch: Big Cloud Fabric, Big Monitoring Fabric, Multi Cloud Director

Bigswitch

3 products

Big Cloud Fabric

Big Monitoring Fabric

Multi Cloud Director

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Bigswitch Big Cloud Fabric	From 4.5 to 4.5.5
Bigswitch Big Cloud Fabric	From 4.7 to 4.7.7
Bigswitch Big Cloud Fabric	From 5.0 to 5.0.1
Bigswitch Big Cloud Fabric	From 5.1 to 5.1.4
Bigswitch Big Monitoring Fabric	From 6.2 to 6.2.4
Bigswitch Big Monitoring Fabric	From 6.3 to 6.3.9
Bigswitch Big Monitoring Fabric	From 7.0 to 7.0.3
Bigswitch Big Monitoring Fabric	From 7.1 to 7.1.4
Bigswitch Multi Cloud Director	Before 1.1.0