CVE-2019-9509: Vertiv Avocent Umg-4000 Firmware

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllable input before displaying to users in a web page, which could allow a remote attacker authenticated with a user account to execute arbitrary code.

Affected products

• Vertiv Avocent Umg-4000 Firmware: version 4.2.1.19 only

Published 2020-03-30. Last modified 2026-06-17.