DEXMA DexGate
view advisory published 2023-09-26
Successful exploitation of these vulnerabilities could result in the attacker impersonating a user, executing arbitrary code, and accessing the connected network.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-42666US | medium5.3 | — | ||
The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requ… | ||||
| CVE-2023-42435US | high8.8 | — | ||
The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to perform actions with the permissions of a victim user.
| ||||
| CVE-2023-41088US | medium6.5OT elevated | — | ||
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clie… | ||||
| CVE-2023-40153US | medium6.1 | — | ||
The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injec… | ||||
| CVE-2023-4108US | high7.5 | — | ||
Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged
| ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-271-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-271-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (5)
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan