CVE-2023-32659

Summary

CVE-2023-32659 is a cross-site scripting vulnerability affecting SUBNET PowerSYSTEM Center versions 2020 U10 and earlier. This issue allows an attacker to inject malicious code into report header graphic files. If exploited, this vulnerability can propagate beyond the system and reach users who subscribe to email notifications. An attacker could leverage this vulnerability to steal sensitive information or execute unwanted actions. Users are advised to upgrade to a patched version of the software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.