Not rated
CVE-2019-1273 A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly…
Description
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows | Versions not published | |
| Windows Server | 2019 | No fix stated |
| Windows 10 Version 1903 for 32-bit Systems | Versions not published | |
| Windows 10 Version 1903 for x64-based Systems | Versions not published | |
| Windows 10 Version 1903 for ARM64-based Systems | Versions not published | |
| Windows Server, version 1903 (Server Core installation) | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows
The 829 CVEs of Windows →
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
7.4
High
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy
7.4
High
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
7.0
High
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Medium