CVE-2019-25419 MEDIUM

CVE-2019-25419: Comodo Dome Firewall 2.7.0 Stored Cross-Site Scripting via schedule

Vendor Comodo
Product Comodo Dome Firewall
Weakness CWE-79 · XSS
Published February 19, 2026
Last update March 2, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

What the vulnerability does

01Description

Comodo Dome Firewall 2.7.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the schedule endpoint. Attackers can submit POST requests with JavaScript payloads in the SCHNAME parameter to execute arbitrary code in administrators' browsers when the schedule page is accessed.

Key dates

02Disclosure timeline

February 19, 2026 CVE published
March 2, 2026 Record updated