CVE Feed

    Dashboard / CVE / CVE-2019-15688

    CVE-2019-15688

    Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. Bypass.

    Published:Nov 26, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 26, 2019
    EPSS Score:0.001
    CVSS Score:6.1

    Affected Products

    Vendor
    Kaspersky
    Product
    Anti-virus
    Vendor
    Kaspersky
    Product
    Internet Security
    Vendor
    Kaspersky
    Product
    Security Cloud
    Vendor
    Kaspersky
    Product
    Small Office Security
    Vendor
    Kaspersky
    Product
    Total Security

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-178 Cross-Site Flashing

    Related CVEs

    CVE-2022-27534 (CVSS 9.8) — Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released befor…
    CVE-2021-27223 (CVSS 5.5) — A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for…
    CVE-2019-15687 (CVSS 6.5) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15686 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-15685 (CVSS 4.3) — Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kasper…
    CVE-2019-8286 (CVSS 4.3) — Information Disclosure in Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security versions…
    CVE-2016-4329 (CVSS 5.5) — A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High