{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-27T02:03:14.725","vulnerabilities":[{"cve":{"id":"CVE-2019-3562","sourceIdentifier":"cve-assign@fb.com","published":"2019-04-29T16:29:00.983","lastModified":"2026-06-17T02:35:14.080","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11."},{"lang":"es","value":"Una página web remota podría inyectar código HTML arbitrario en la interfaz de usuario del navegador Oculus, permitiendo que un atacante falsifique la interfaz de usuario y potencialmente ejecute código. Esto afecta al navegador Oculus desde la versión 5.2.7 hasta la 5.7.11."}],"affected":[{"source":"cve-assign@fb.com","affectedData":[{"vendor":"Oculus","product":"Oculus Browser","versions":[{"version":"5.7.11","status":"affected"},{"version":"5.2.7","lessThan":"unspecified","versionType":"custom","status":"affected"},{"version":"unspecified","lessThan":"5.2.7","versionType":"custom","status":"unaffected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"cve-assign@fb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-74"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oculus:oculus_browser:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.7","versionEndIncluding":"5.7.11","matchCriteriaId":"91679425-9381-4723-AB36-282A5BDAAB07"}]}]}],"references":[{"url":"https://www.facebook.com/security/advisories/cve-2019-3562","source":"cve-assign@fb.com","tags":["Third Party Advisory"]},{"url":"https://www.facebook.com/security/advisories/cve-2019-3562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}