Lucene search

K
cveMitreCVE-2023-29837
HistoryMay 17, 2023 - 8:15 p.m.

CVE-2023-29837

2023-05-1720:15:10
CWE-79
mitre
web.nvd.nist.gov
16
cve-2023-29837
cross site scripting
exelysis
unified communication solution
eucs
remote attacker
privilege escalation
url path

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

50.8%

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution (EUCS) v.1.0 allows a remote attacker to gain privileges via the URL path of the eucsAdmin login web page.

Affected configurations

Nvd
Node
exelysisexelysis_unified_communications_solutionMatch1.0
VendorProductVersionCPE
exelysisexelysis_unified_communications_solution1.0cpe:2.3:a:exelysis:exelysis_unified_communications_solution:1.0:*:*:*:*:*:*:*

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

50.8%

Related for CVE-2023-29837