Lucene search
HistoryJun 02, 2023 - 12:15 p.m.
CVE-2023-33731
cve-2023-33731
cross site scripting
xss
microworld technologies
escan management console
remote code injection
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
34.4%
Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the URL directly.
Affected configurations
Node
escanavescan_management_consoleMatch14.0.1400.2281
| CPE | Name | Operator | Version |
|---|---|---|---|
| escanav:escan_management_console | escanav escan management console | eq | 14.0.1400.2281 |
Related
cvelist
cvelist
CVE-2023-33731
2023-06-02 00:00:00
prion
prion
Cross site scripting
2023-06-02 12:15:00
nvd
nvd
CVE-2023-33731
2023-06-02 12:15:09
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
34.4%
Related for CVE-2023-33731