{"id":"CVE-2019-3718","aliases":["EUVD-2019-13353","GHSA-633m-wmv3-jq48"],"status":"published","title":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation...","description":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","severity":{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00673,"percentile":0.52359,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2019-04-18T19:58:22Z","modified":"2026-06-17T02:35:27Z","products":[{"vendor":"dell","product":"supportassist"},{"vendor":"dell","product":"supportassist client"}],"references":[{"url":"https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/108020","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3718"},{"url":"https://github.com/advisories/GHSA-633m-wmv3-jq48"}],"sources":{"cve":[{"id":"CVE-2019-3718","description":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","status":"published","published":"2019-04-18T19:58:22.877Z","modified":"2024-09-16T21:57:00.834Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13353","description":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","status":"published","published":"2019-04-18T19:58:22Z","modified":"2024-09-16T21:57:00Z","cvss":[{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:07.221362Z"}],"ghsa":[{"id":"GHSA-633m-wmv3-jq48","title":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation...","description":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","status":"published","published":"2022-05-24T16:43:55Z","modified":"2023-02-17T05:06:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:54:08.612342Z"}],"nvd":[{"id":"CVE-2019-3718","description":"Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.","status":"published","published":"2019-04-18T20:29:01.097Z","modified":"2026-06-17T02:35:27.06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7.6,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:05:11.426883Z"}]}}