CVE-2019-3562

CVE-2019-3562

Vendor Oculus
Product Oculus Browser
Weakness CWE-74
Published April 29, 2019
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11.

Key dates

02Disclosure timeline

April 29, 2019 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-21705 Authenticated remote code execution in octobercms CVE-2026-35515 @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection') CVE-2025-32390 EspoCRM vulnerable to HTML Injection into phishing, which may lead to account takeover CVE-2024-47764 cookie accepts cookie name, path, and domain with out of bounds characters CVE-2026-32695 Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass