CVE-2019-1903

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information or cause a denial of service (DoS) condition. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit this vulnerability by sending malicious requests to a targeted system that contain references within XML entities. An exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information, or cause the application to consume available resources, resulting in a DoS condition.

• CWE-611
• CWE-611

• http://www.securityfocus.com/bid/108857Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-csm-xmlVendor Advisory
• http://www.securityfocus.com/bid/108857Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-csm-xmlVendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19021An issue was discovered in TitanHQ WebTitan before 5.18. It …9.8
• CVE-2019-19022iTerm2 through 3.3.6 has potentially insufficient documentat…7.5
• CVE-2019-19023Cloud Native Computing Foundation Harbor prior to 1.8.6 and …8.8
• CVE-2019-19025Cloud Native Computing Foundation Harbor prior to 1.8.6 and …8.8
• CVE-2019-19026Cloud Native Computing Foundation Harbor prior to 1.8.6 and …4.9
• CVE-2019-19029Cloud Native Computing Foundation Harbor prior to 1.8.6 and …7.2
• CVE-2019-19030Cloud Native Computing Foundation Harbor before 1.10.3 and 2…5.3
• CVE-2019-19031Easy XML Editor through v1.7.8 is affected by: XML External …8.1
• CVE-2019-19032XMLBlueprint through 16.191112 is affected by XML External E…8.1
• CVE-2019-19033Jalios JCMS 10 allows attackers to access any part of the we…9.8
• CVE-2019-19034Zoho ManageEngine Asset Explorer 6.5 does not validate the S…7.2
• CVE-2019-19035jhead 3.03 is affected by: heap-based buffer over-read. The …5.5