Atos Unify Openscape Uc Web Client vulnerabilities

2 CVEs affecting Atos Unify Openscape Uc Web Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19866, published 2020-02-21.

More from Atos.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-19866, published 2020-02-21. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information. By iterating the value of conferenceId to…
• CVE-2019-19865, published 2020-02-21. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. Atos Unify OpenScape UC Application V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary…