CVE-2019-19912: Intland Codebeamer

Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days.

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file.

Affected products

• Intland Codebeamer: up to and including 9.5

Published 2020-03-30. Last modified 2026-06-17.