{"advisories":[{"id":"EUVD-2019-3048","source":"euvd","title":"Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html \"System contact\" field.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3048"}],"cve":"CVE-2019-11370","epss":{"score":0.04935},"mitre":{"cpes":[],"created":"2019-06-03T19:44:10+00:00","description":"Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html \"System contact\" field.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2019/11xxx/CVE-2019-11370.json","references":["https://drive.google.com/open?id=1WkmtsCVNCtxwWH2fe9DtHow_Nedp1a7j","https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370"],"title":null,"updated":"2024-08-04T22:48:09.145000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:h:carel:pcoweb_card:-:*:*:*:*:*:*:*","cpe:2.3:o:carel:pcoweb_card_firmware:*:*:*:*:*:*:*:*"],"created":"2019-06-03T20:29:00.453000+00:00","description":"Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html \"System contact\" field.","metrics":{"cvssV2_0":{"score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N"},"cvssV3_0":{"score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2019/CVE-2019-11370.json","references":["https://drive.google.com/open?id=1WkmtsCVNCtxwWH2fe9DtHow_Nedp1a7j","https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370"],"title":null,"updated":"2026-06-17T02:12:47.900000+00:00","vendors":["carel","carel$PRODUCT$pcoweb_card","carel$PRODUCT$pcoweb_card_firmware"],"weaknesses":["CWE-79"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:h:carel:pcoweb_card:-:*:*:*:*:*:*:*","cpe:2.3:o:carel:pcoweb_card_firmware:*:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2019-06-03T19:44:10+00:00","provider":"mitre"},"description":{"data":"Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html \"System contact\" field.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N"},"provider":"nvd"},"cvssV3_0":{"data":{"score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.04935},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://drive.google.com/open?id=1WkmtsCVNCtxwWH2fe9DtHow_Nedp1a7j","https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-21T04:20:58.220000+00:00","provider":"nvd"},"vendors":{"data":["carel","carel$PRODUCT$pcoweb_card","carel$PRODUCT$pcoweb_card_firmware"],"providers":["nvd"]},"weaknesses":{"data":["CWE-79"],"providers":["nvd"]}}}