CVE-2019-1827

A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the service. The vulnerability exists because the Online Help web service of an affected device insufficiently validates user-supplied input. An attacker could exploit this vulnerability by persuading a user of the service to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected service or access sensitive browser-based information.This vulnerability affects Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers running firmware releases prior to 1.4.2.22.

• CWE-79
• CWE-79

• http://www.securityfocus.com/bid/107776Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190404-rv-xssVendor Advisory
• http://www.securityfocus.com/bid/107776Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190404-rv-xssVendor Advisory

Published

Apr 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1826A vulnerability in the quality of service (QoS) feature of C…6.8
• CVE-2019-18261In Omron PLC CS series, all versions, Omron PLC CJ series, a…9.8
• CVE-2019-18263An issue was found in Philips Veradius Unity, Pulsera, and E…6.5
• CVE-2019-18265Digital Alert Systems’ DASDEC software prior to version 4.1 …5.4
• CVE-2019-18267An issue was found in GE S2020/S2020G Fast Switch 61850, S20…5.4
• CVE-2019-18269Omron’s CS and CJ series PLCs have an unrestricted externall…9.8
• CVE-2019-18271OSIsoft PI Vision, All versions of PI Vision prior to 2019. …8.8
• CVE-2019-18273OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 S…4.8
• CVE-2019-18275OSIsoft PI Vision, All versions of PI Vision prior to 2019. …6.5
• CVE-2019-18276An issue was discovered in disable_priv_mode in shell.c in G…7.8
• CVE-2019-18277A flaw was found in HAProxy before 2.0.6. In legacy mode, me…7.5
• CVE-2019-18278When executing VideoLAN VLC media player 3.0.8 with libqt on…7.8