Read the docs

Oculus

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Oculus records in CISA KEV

No Oculus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Oculus Browser · all components

TI-2019-02627 CVE-2019-3562 · GHSA-3r49-5cp4-92j3

Injection in Oculus Browser

Priority LOW 29

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01096 Published 2019-04-29 No fix listed CWE-74
Open these records in search →