CVE-2019-12167

httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter.

• CWE-79

• http://www.securityfocus.com/bid/108420
• https://seclists.org/bugtraq/2019/May/51Mailing List, Third Party Advisory
• https://www.emerson.com/en-us/supportVendor Advisory
• http://www.securityfocus.com/bid/108420
• https://seclists.org/bugtraq/2019/May/51Mailing List, Third Party Advisory
• https://www.emerson.com/en-us/supportVendor Advisory

Published

May 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12160GoHTTP through 2017-07-25 has a sendHeader use-after-free.
• CVE-2019-12161WPO WebPageTest 19.04 allows SSRF because ValidateURL in www…
• CVE-2019-12162Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash…
• CVE-2019-12163GAT-Ship Web Module through 1.30 allows remote attackers to …5.3
• CVE-2019-12164ubuntu-server.js in Status React Native Desktop before v0.57…
• CVE-2019-12165MiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and…9.8
• CVE-2019-12168Four-Faith Wireless Mobile Router F3x24 v1.0 devices allow r…
• CVE-2019-12169ATutor 2.2.4 allows Arbitrary File Upload and Directory Trav…8.8
• CVE-2019-1217A remote code execution vulnerability exists in the way that…7.5
• CVE-2019-12170ATutor through 2.2.4 is vulnerable to arbitrary file uploads…
• CVE-2019-12171Dropbox.exe (and QtWebEngineProcess.exe in the Web Helper) i…
• CVE-2019-12172Typora 0.9.9.21.1 (1913) allows arbitrary code execution via…