AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2019-10179

MEDIUM · CVSS 4.3 EPSS 0.92%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-03-20 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2019-10179
Severity
MEDIUM
CVSS
4.3
EPSS
0.92%
Java

Original Filing — NVD Description

A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.