CVE-2019-7421: Samsung Syncthru Web Service

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

XSS exists in SAMSUNG X7400GX SyncThru Web Service V6.A6.25 V11.01.05.25_08-21-2015 in "/sws.login/gnb/loginView.sws" in multiple parameters: contextpath and basedURL.

Affected products

• Samsung Syncthru Web Service: affected versions not specified
• Samsung x7400gx Firmware: version 6.a6.25 only

Published 2019-03-21. Last modified 2026-06-17.