Big Monitoring Fabric

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bigswitch:big_monitoring_fabric:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBigswitch (08523a01-a846-5f89-a7e5-3e97d663198f)
ProductBig Monitoring Fabric (d76c931f-0636-59f7-98a4-7acf21073703)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19632 vulnerable 2026-06-08 05:13:23.208649 Details available
An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. An unauthenticated attacker may inject stored arbitrary JavaScript (XSS), and execute it in the content of authenticated administrators.
Published: 2020-01-24T14:58:06.000Z
Updated: 2024-08-05T02:25:12.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19631 vulnerable 2026-06-08 05:13:23.205018 Details available
An issue was discovered in Big Switch Big Monitoring Fabric 6.2 through 6.2.4, 6.3 through 6.3.9, 7.0 through 7.0.3, and 7.1 through 7.1.3; Big Cloud Fabric 4.5 through 4.5.5, 4.7 through 4.7.7, 5.0 through 5.0.1, and 5.1 through 5.1.4; and Multi-Cloud Director through 1.1.0. A read-only user can access sensitive information via an API endpoint that reveals session cookies of authenticated administrators, leading to privilege escalation.
Published: 2020-01-24T15:15:39.000Z
Updated: 2024-08-05T02:25:12.218Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.