Lucene search

K
nvd[email protected]NVD:CVE-2023-38536
HistoryMar 13, 2024 - 10:15 p.m.

CVE-2023-38536

2024-03-1322:15:08
CWE-79
web.nvd.nist.gov
8
html injection
opentext exceed turbo x
version 12.5.1
cross site scripting
cve-2023-38536

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:H

EPSS

0

Percentile

9.0%

HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scripting.

CVSS3

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-38536