Lucene search
HistorySep 22, 2023 - 5:15 a.m.
CVE-2023-43763
cve-2023-43763
withsecure
xss
unvalidated parameter
endpoint
policy manager
windows
linux
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux.
Affected configurations
Node
withsecuref-secure_policy_managerMatch15.00linux_kernel
ORwithsecuref-secure_policy_managerMatch15.00windows
| CPE | Name | Operator | Version |
|---|---|---|---|
| withsecure:f-secure_policy_manager | withsecure f-secure policy manager | eq | 15.00 |
Related
cvelist
cvelist
CVE-2023-43763
2023-09-22 00:00:00
nvd
nvd
CVE-2023-43763
2023-09-22 05:15:09
prion
prion
Code injection
2023-09-22 05:15:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Related for CVE-2023-43763