CVE-2019-19632

Published: Jan 24, 2020Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. An unauthenticated attacker may inject stored arbitrary JavaScript (XSS), and execute it in the content of authenticated administrators.

Affected (9)

Products: Bigswitch: Big Cloud Fabric, Big Monitoring Fabric, Multi Cloud Director

Bigswitch

3 products

Big Cloud Fabric

Big Monitoring Fabric

Multi Cloud Director

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Bigswitch Big Cloud Fabric	4.5 ≤ version < 4.5.5
Bigswitch Big Cloud Fabric	4.7 ≤ version < 4.7.7
Bigswitch Big Cloud Fabric	5.0 ≤ version < 5.0.1
Bigswitch Big Cloud Fabric	5.1 ≤ version < 5.1.4
Bigswitch Big Monitoring Fabric	6.2 ≤ version < 6.2.4
Bigswitch Big Monitoring Fabric	6.3 ≤ version < 6.3.9
Bigswitch Big Monitoring Fabric	7.0 ≤ version < 7.0.3
Bigswitch Big Monitoring Fabric	7.1 ≤ version < 7.1.4
Bigswitch Multi Cloud Director	version < 1.1.0