CVE-2023-4093

CVE-2023-4093 : Reflected and persistent XSS in Fujitsu Arconte Áurea, version 1.5.0.0. Exploitation could inject malicious JavaScript, compromise the victim’s browser, redirect to malicious domains, or access information being viewed. Technical details present in multiple sources confirm the vul...

CVE-2023-4095

CVE-2023-4095 describes a user enumeration vulnerability affecting Arconte Áurea version 1.5.0.0 (and prior), where an attacker could obtain a list of registered users, enabling further targeted attacks. The connected sources confirm the affected software and the nature of the impact, with public...

CVE-2023-4094

ARCONTE Aurea Arconte Áurea 1.5.0.0 has a weak authentication vulnerability that lets an attacker issue false login attempts to block legitimate accounts and cause a denial of service. A separate resource indicates a method to circumvent the login attempt limit. Public documents identify the affe...

CVE-2023-4092

The CVE-2023-4092 entry concerns Fujitsu Arconte Áurea before version 1.5.0.0. The vulnerability is a SQL injection in Arconte Áurea 1.5.0.0 that could allow an attacker to read sensitive data, modify data (insert/update/delete), perform database administration tasks, and in some cases execute co...

CVE-2023-4096

CVE-2023-4096 affects Fujitsu Arconte Áurea v1.5.0.0. Multiple sources describe a weak password recovery mechanism that could enable an attacker to brute‑force the emailed PIN to change a legitimate user’s password. Affected component appears to be the password recovery flow (PIN delivery/validat...