Lucene search

K
HcltechUnica

6 matches found

CVE
CVE
added 2023/08/03 10:15 p.m.2487 views

CVE-2023-37497

The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.

8.8CVSS8.2AI score0.00128EPSS
CVE
CVE
added 2022/05/12 10:15 p.m.76 views

CVE-2021-27777

XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validation. Attackers can exploit this vulnerability to manipulate XML content and inject malicious external entity references.

7.5CVSS7.8AI score0.003EPSS
CVE
CVE
added 2023/08/03 10:15 p.m.59 views

CVE-2023-37498

A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. It is possible that an attacker could potentially escalate their privileges.

8.8CVSS8.2AI score0.00277EPSS
CVE
CVE
added 2023/08/03 10:15 p.m.55 views

CVE-2023-37500

A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform. An attacker could hijack a user's session and perform other attacks.

8.1CVSS6.3AI score0.00468EPSS
CVE
CVE
added 2023/08/03 11:15 p.m.49 views

CVE-2023-37501

A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign. An attacker could hijack a user's session and perform other attacks.

8.1CVSS6.5AI score0.00319EPSS
CVE
CVE
added 2023/08/03 10:15 p.m.44 views

CVE-2023-37499

A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform. An attacker could hijack a user's session and perform other attacks.

8.1CVSS6.3AI score0.00468EPSS