{
    "id": "CVE-2019-1943",
    "published": "2019-07-17 21:15:12",
    "last_modified": "2026-06-17 02:29:39",
    "cvss_score": "4.7",
    "cvss_severity": "MEDIUM",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
    "cwe": "CWE-601",
    "description": "A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites.",
    "epss_score": "0.09687",
    "epss_percentile": "0.95347",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-28 18:17:23",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "cisco",
            "product": "sf200-24"
        },
        {
            "vendor": "cisco",
            "product": "sf200-24_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sf200-24fp"
        },
        {
            "vendor": "cisco",
            "product": "sf200-24fp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sf200-24p"
        },
        {
            "vendor": "cisco",
            "product": "sf200-24p_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sf200-48"
        },
        {
            "vendor": "cisco",
            "product": "sf200-48_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sf200-48p"
        },
        {
            "vendor": "cisco",
            "product": "sf200-48p_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sf300-24pp"
        },
        {
            "vendor": "cisco",
            "product": "sf300-24pp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sf302-08mpp"
        },
        {
            "vendor": "cisco",
            "product": "sf302-08mpp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sf302-08pp"
        },
        {
            "vendor": "cisco",
            "product": "sf302-08pp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-08"
        },
        {
            "vendor": "cisco",
            "product": "sg200-08_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-08p"
        },
        {
            "vendor": "cisco",
            "product": "sg200-08p_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-10fp"
        },
        {
            "vendor": "cisco",
            "product": "sg200-10fp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-18"
        },
        {
            "vendor": "cisco",
            "product": "sg200-18_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-26"
        },
        {
            "vendor": "cisco",
            "product": "sg200-26_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-26fp"
        },
        {
            "vendor": "cisco",
            "product": "sg200-26fp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-26p"
        },
        {
            "vendor": "cisco",
            "product": "sg200-26p_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-50"
        },
        {
            "vendor": "cisco",
            "product": "sg200-50_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-50fp"
        },
        {
            "vendor": "cisco",
            "product": "sg200-50fp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg200-50p"
        },
        {
            "vendor": "cisco",
            "product": "sg200-50p_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg300-10mpp"
        },
        {
            "vendor": "cisco",
            "product": "sg300-10mpp_firmware"
        },
        {
            "vendor": "cisco",
            "product": "sg300-10pp"
        },
        {
            "vendor": "cisco",
            "product": "sg300-10pp_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "47118",
            "title": "CISCO Small Business 200 / 300 / 500 Switches - Multiple Vulnerabilities",
            "date": "2019-07-15",
            "url": "https://www.exploit-db.com/exploits/47118"
        }
    ],
    "refs_list": [
        "http://www.securityfocus.com/bid/109288",
        "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirect",
        "http://www.securityfocus.com/bid/109288",
        "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirect"
    ]
}