Lucene search
HistoryJul 20, 2023 - 7:15 p.m.
CVE-2023-37600
office suite
premium version
xss
vulnerability
api
profile
reflective
37600
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
41.2%
Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /api?path=profile.
Affected configurations
Node
mobisystemsoffice_suiteMatch10.9.1.42602premiumiphone_os
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mobisystems | office_suite | 10.9.1.42602 | cpe:2.3:a:mobisystems:office_suite:10.9.1.42602:*:*:*:premium:iphone_os:*:* |
Related
prion
prion
Cross site scripting
2023-07-20 19:15:00
cvelist
cvelist
CVE-2023-37600
2023-07-20 00:00:00
cve
cve
CVE-2023-37600
2023-07-20 19:15:10
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
41.2%
Related for NVD:CVE-2023-37600