CoreCVE
Back

MEDIUM

Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval

Published May 31, 2023

Description

Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 31, 2023
Updated Jan 10, 2025
Reserved May 22, 2023
Link CVE-2023-33732
CISA Vulnrichment
Updated Jan 10, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-33732
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-33732
ENISA EUVD
Assigner mitre
Published May 31, 2023
Updated Jan 10, 2025
Exploited since n/a
Link EUVD-2023-37886
EUVD-2023-37886