Security Advisory
CVE-2018-19439
6.1
MEDIUM
Vulnerability Description
XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4). helpwindow.jsp has reflected XSS via all parameters, as demonstrated by the sgdadmin/faces/com_sun_web_ui/help/helpwindow.jsp windowTitle parameter.
Published Date
December 13, 2018
Official Source
NIST NVD Advisory