{
    "id": "CVE-2019-9955",
    "published": "2019-04-22 20:29:00",
    "last_modified": "2026-06-17 02:44:55",
    "cvss_score": "6.1",
    "cvss_severity": "MEDIUM",
    "cvss_version": "3.0",
    "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
    "cwe": "CWE-79",
    "description": "On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, ZyWALL 1100 devices, the security firewall login page is vulnerable to Reflected XSS via the unsanitized 'mp_idx' parameter.",
    "epss_score": "0.21180",
    "epss_percentile": "0.97512",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-27 18:17:24",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "zyxel",
            "product": "atp200"
        },
        {
            "vendor": "zyxel",
            "product": "atp200_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "atp500"
        },
        {
            "vendor": "zyxel",
            "product": "atp500_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "atp800"
        },
        {
            "vendor": "zyxel",
            "product": "atp800_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg110"
        },
        {
            "vendor": "zyxel",
            "product": "usg110_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg1100"
        },
        {
            "vendor": "zyxel",
            "product": "usg1100_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg1900"
        },
        {
            "vendor": "zyxel",
            "product": "usg1900_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg20-vpn"
        },
        {
            "vendor": "zyxel",
            "product": "usg20-vpn_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg20w-vpn"
        },
        {
            "vendor": "zyxel",
            "product": "usg20w-vpn_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg210"
        },
        {
            "vendor": "zyxel",
            "product": "usg210_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg2200-vpn"
        },
        {
            "vendor": "zyxel",
            "product": "usg2200-vpn_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg310"
        },
        {
            "vendor": "zyxel",
            "product": "usg310_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg40"
        },
        {
            "vendor": "zyxel",
            "product": "usg40_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg40w"
        },
        {
            "vendor": "zyxel",
            "product": "usg40w_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg60"
        },
        {
            "vendor": "zyxel",
            "product": "usg60_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "usg60w"
        },
        {
            "vendor": "zyxel",
            "product": "usg60w_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "vpn100"
        },
        {
            "vendor": "zyxel",
            "product": "vpn100_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "vpn50"
        },
        {
            "vendor": "zyxel",
            "product": "vpn50_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "zywall_110"
        },
        {
            "vendor": "zyxel",
            "product": "zywall_110_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "zywall_1100"
        },
        {
            "vendor": "zyxel",
            "product": "zywall_1100_firmware"
        },
        {
            "vendor": "zyxel",
            "product": "zywall_310"
        },
        {
            "vendor": "zyxel",
            "product": "zywall_310_firmware"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "46706",
            "title": "Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 - Login Page Cross-Site Scripting",
            "date": "2019-04-16",
            "url": "https://www.exploit-db.com/exploits/46706"
        }
    ],
    "refs_list": [
        "http://packetstormsecurity.com/files/152525/Zyxel-ZyWall-Cross-Site-Scripting.html",
        "http://seclists.org/fulldisclosure/2019/Apr/22",
        "https://www.exploit-db.com/exploits/46706/",
        "https://www.securitymetrics.com/blog/Zyxel-Devices-Vulnerable-Cross-Site-Scripting-Login-page",
        "https://www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtml",
        "http://packetstormsecurity.com/files/152525/Zyxel-ZyWall-Cross-Site-Scripting.html",
        "http://seclists.org/fulldisclosure/2019/Apr/22",
        "https://www.exploit-db.com/exploits/46706/",
        "https://www.securitymetrics.com/blog/Zyxel-Devices-Vulnerable-Cross-Site-Scripting-Login-page",
        "https://www.zyxel.com/support/reflected-cross-site-scripting-vulnerability-of-firewalls.shtml"
    ]
}