CVE-2023-41088: medium-severity vulnerability in DEXMA DexGate
Cleartext Transmission of Sensitive Information in DEXMA DEXGate
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.3%
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us the information within it to access the application.
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Affected products
DEXMA · DexGateRelated CVEs — DEXMA DexGate
In the same product, most dangerous first.
CVE-2023-41089HIGHImproper Authentication in DEXMA DEXGateEPSS 0.6%CVE-2023-42666MEDIUMExposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGateEPSS 0.5%CVE-2023-40153MEDIUMCross-site Scripting in DEXMA DEXGateEPSS 0.4%CVE-2023-42435MEDIUMCross-Site Request Forgery in DEXMA DEXGateEPSS 0.2%