CVE-2023-40153mediumCWE-79

CVE-2023-40153: medium-severity vulnerability in DEXMA DexGate

Cross-site Scripting in DEXMA DEXGate

Published · Updated

Follow this CVE+ Monitor DexGate

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.4%
The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
DEXMA · DexGate
Related CVEs — DEXMA DexGate

In the same product, most dangerous first.

CVE-2023-41089HIGHImproper Authentication in DEXMA DEXGateEPSS 0.6%CVE-2023-42666MEDIUMExposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGateEPSS 0.5%CVE-2023-41088MEDIUMCleartext Transmission of Sensitive Information in DEXMA DEXGateEPSS 0.3%CVE-2023-42435MEDIUMCross-Site Request Forgery in DEXMA DEXGateEPSS 0.2%