CVE-2019-3776

5.4 mediumEPSS 0.8%

Medium (5.4) in pivotal software operations manager. EPSS 0.8% chance of exploitation in the next 30 days.

Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince an Operations Manager user to interact with malicious content could execute arbitrary JavaScript in the user's browser.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pivotal_software:operations_manager

References

http://www.securityfocus.com/bid/107344
https://pivotal.io/security/cve-2019-3776
http://www.securityfocus.com/bid/107344
https://pivotal.io/security/cve-2019-3776

Check your stack JSON