CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2019-14863
Medium (6.1). EPSS 1.2% chance of exploitation in the next 30 days. Fixed in angular 1.5.0-beta.1.
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- angularjs:angularjs
- redhat:decision_manager
- redhat:process_automation
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-r5fx-8r73-v86c | npm | angular | <1.5.0-beta.1 | 1.5.0-beta.1 |