Security Advisory

CVE-2019-25367

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-15 13:58:50

Last updated 2026-07-15 01:23:51

Assigner VulnCheck

CVSS score 4.8

State PUBLISHED

Description

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users' browsers.

← Browse all CVEs View on cve.org ↗