CVE-2019-9508: Vertiv Avocent Umg-4000 Firmware

Low severity, CVSS 3.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time a user browsed to the page.

Affected products

• Vertiv Avocent Umg-4000 Firmware: version 4.2.1.19 only

Published 2020-03-30. Last modified 2026-06-17.