CVE-2023-46396
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Oct 25, 2023
Updated: Nov 2, 2023
CWE ID 79
Summary
CVE-2023-46396 refers to a Cross-Site Scripting (XSS) vulnerability affecting Audimex version 15.0.0. Hackers can exploit this issue by manipulating the company parameter search filters in the /audimex/cgi-bin/wal.fcgi path. Successful exploitation could allow attackers to inject malicious scripts into a victim's web browser, potentially leading to data theft or unauthorized account access. Users are advised to update their Audimex installations to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share