CVE-2019-3490

A DOM based XSS vulnerability has been identified in the Netstorage component of Open Enterprise Server (OES) allowing a remote attacker to execute javascript in the victims browser by tricking the victim into clicking on a specially crafted link. This affects OES versions OES2015SP1, OES2018, and OES2018SP1. Older versions may be affected but were not tested as they are out of support.

• CWE-79

• https://support.microfocus.com/kb/doc.php?id=7023828
• https://support.microfocus.com/kb/doc.php?id=7023828

Published

May 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3482Mitigates a directory traversal issue in ArcSight Logger ver…
• CVE-2019-3483Mitigates a potential information leakage issue in ArcSight …
• CVE-2019-3484Mitigates a remote code execution issue in ArcSight Logger v…
• CVE-2019-3485Mitigates a stored cross site scripting issue in ArcSight Lo…4.6
• CVE-2019-3486Mitigates a stored cross site scripting issue in ArcSight Se…4.6
• CVE-2019-3489An unauthenticated file upload vulnerability has been identi…
• CVE-2019-3493A potential security vulnerability has been identified in Mi…
• CVE-2019-3494Simply-Blog through 2019-01-01 has SQL Injection via the adm…
• CVE-2019-3495An issue was discovered on Wifi-soft UniBox controller 0.x t…8.8
• CVE-2019-3496An issue was discovered on Wifi-soft UniBox controller 3.x d…8.8
• CVE-2019-3497An issue was discovered on Wifi-soft UniBox controller 0.x t…8.8
• CVE-2019-3498In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.…