CVE-2023-37196

Summary

CVE-2023-37196 is a vulnerability affecting DCE that combines an SQL Injection and CWE-89 issue. An authenticated user can exploit this vulnerability by tampering with alert settings, potentially gaining unauthorized access to content, making unauthorized changes, or deleting data, and executing unauthorized actions on DCE.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.