vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-9508

Vertiv Avocent UMG-4000 version 4.2.1.19 web interface is vulnerable to stored cross site scripting

LOW
3.5
CVSS Score
Published: March 30, 2020 at 08:50 PM UTC
Updated: June 17, 2026 at 02:43 AM UTC
2 products affected across 1 vendorAvocent Umg 4000 FirmwareAvocent Umg-4000

Using Avocent UMG-4000 by Vertiv?

Get instant alerts when new vulnerabilities affect Avocent UMG-4000 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
LOW3.5
Exploit prediction
EPSS 0.6%

Description

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time a user browsed to the page.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Avocent Umg 4000 Firmware· Vertiv
95%
4.2.1.19
vertiv-avocent-umg-4000 (same device)
Avocent Umg-4000· Vertivdevice
80%
All versions

References (2)

x_refsource_MISCVendor Advisory
Source: [email protected]
https://www.vertiv.com/en-us/support/software-download/it-management/avocent-universal-management-gateway-appliance--software-downloads/
x_refsource_MISCVendor Advisory
Source: [email protected]
https://www.vertiv.com/en-us/support/software-download/software/trellis-enterprise-and-quick-start-solutions-software-downloads/

CVSS

3.5LOW[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card