CVEvulnerability
CVE-2019-6229
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to universal cross site scripting.
Affected configurations
• apple safari (< 12.0.3)
• apple iphone os (< 12.1.3)
• apple tvos (< 12.1.2)
• apple icloud (< 7.10)
• apple itunes (< 12.9.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securityfocus.com/bid/106691 Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201903-12 Third Party Advisory
- https://support.apple.com/HT209443 Vendor Advisory
- https://support.apple.com/HT209447 Vendor Advisory
- https://support.apple.com/HT209449 Vendor Advisory
- https://support.apple.com/HT209450 Vendor Advisory
- https://support.apple.com/HT209451 Vendor Advisory
- http://www.securityfocus.com/bid/106691 Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201903-12 Third Party Advisory
- https://support.apple.com/HT209443 Vendor Advisory
- https://support.apple.com/HT209447 Vendor Advisory
- https://support.apple.com/HT209449 Vendor Advisory
- https://support.apple.com/HT209450 Vendor Advisory
- https://support.apple.com/HT209451 Vendor Advisory