CVE-2019-6228

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2019
Source publication: Mar 5, 2019
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, Safari 12.0.3. Processing maliciously crafted web content may lead to a cross site scripting attack.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

iOS

Vendor: Apple
Product: iOS
Platforms: Unknown
Default status: Unknown

iOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	iOS 12.1.3	Unavailable	None listed

Safari

Vendor: Apple
Product: Safari
Platforms: Unknown
Default status: Unknown

Safari · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	Safari 12.0.3	Unavailable	None listed