CVE-2023-3946

Summary

CVE-2023-3946 is a reflected cross-site scripting (XSS) vulnerability affecting ePO versions prior to 5.10 SP1 Update 1. An attacker can exploit this issue by crafting a malicious link and convincing an authenticated ePO administrator to click on it. Successful exploitation grants the attacker limited access to the administrator's session, allowing potential access to sensitive information and the ability to alter some information in ePO.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.