DEXMA DexGate
Successful exploitation of these vulnerabilities could result in the attacker impersonating a user, executing arbitrary code, and accessing the connected network.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-42666US | medium5.3 | — | ||
The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requ… | ||||
| CVE-2023-42435US | high8.8 | — | ||
The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to perform actions with the permissions of a victim user.
| ||||
| CVE-2023-41088US | medium6.5OT erhöht | — | ||
The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clie… | ||||
| CVE-2023-40153US | medium6.1 | — | ||
The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injec… | ||||
| CVE-2023-4108US | high7.5 | — | ||
Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged
| ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-23-271-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-271-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
- MitigationDEXGate
Dexma has not responded to CISA's requests to coordinate at this time.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan