CVE-2023-37500

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Aug 3, 2023
Updated: Aug 7, 2023
CWE ID 79

Summary

CVE-2023-37500 is a Persistent Cross-site Scripting (XSS) vulnerability identified in certain pages of Unica Platform. An attacker can exploit this flaw to inject malicious scripts into a victim's browser, hijacking their session and potentially executing various attacks. This issue poses a significant security risk, allowing unauthorized access and data theft. Users are advised to update their Unica Platform installation as soon as a patch becomes available.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share