vulnerability

Oracle VirtualBox: CVE-2019-10219: Improper Neutralization of Input During Web Page Generation

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Nov 8, 2019
Added
Jul 17, 2025
Modified
Jul 17, 2025

Description

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Solution

oracle-virtualbox-upgrade-latest

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.