CVE-2023-37222

CVE-2023-37222 affects Farsight Tech Nordic AB ProVide 14.5. The vulnerability is multiple Cross-Site Scripting (CWE-79) in the web interface that can be exploited by a user with administrator privileges, with user interaction required. CVSS details from NVD indicate a low/moderate overall impact...

CVE-2023-23286

CVE-2023-23286 describes a cross-site scripting (XSS) vulnerability in Provide server 14.4 that can be triggered via the server logs by the username field in the login form. The CVE indicates unauthenticated access, enabling an attacker to execute arbitrary code through the server-log content whe...