medium5.4
CVE-2019-1273
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Acti…
Impact
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | Versions 1803, 1809, 1903 |
| Microsoft | Windows Server 2016 | Versions 1803, 1903 |
| Microsoft | Windows Server 2019 | All versions |