Vulnerabilities > CVE-2019-14862

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

knockoutjs

redhat

oracle

NVD

Published: 2020-01-02

Updated: 2024-11-21

Summary

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.

Vulnerable Configurations

Part	Description	Count
Application	Knockoutjs Knockoutjs Knockout - Knockoutjs Knockout 1.0.0 Knockoutjs Knockout 1.0.1 Knockoutjs Knockout 1.0.2 Knockoutjs Knockout 1.0.3 Knockoutjs Knockout 1.0.4 Knockoutjs Knockout 1.0.5 Knockoutjs Knockout 1.1.0 Knockoutjs Knockout 1.1.1 Knockoutjs Knockout 1.1.2 Knockoutjs Knockout 1.2.0 Knockoutjs Knockout 1.2.1 Knockoutjs Knockout 1.3.0 Knockoutjs Knockout 2.0.0 Knockoutjs Knockout 2.1.0 Knockoutjs Knockout 2.2.0 Knockoutjs Knockout 2.2.1 Knockoutjs Knockout 2.3.0 Knockoutjs Knockout 3.0.0 Knockoutjs Knockout 3.1.0 Knockoutjs Knockout 3.2.0 Knockoutjs Knockout 3.3.0 Knockoutjs Knockout 3.4.0 Knockoutjs Knockout 3.4.1 Knockoutjs Knockout 3.4.2	39
Application	Redhat Redhat Decision Manager 7.0 Redhat Process Automation 7.0	2
Application	Oracle Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Intelligence 5.5.0.0.0 Oracle Goldengate 12.3.0.1.2	4

Vulnerabilities > CVE-2019-14862 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2019-14862"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2019-14862