CVE-2023-34836

CVSS Score of 10 (low)

Details

Published Jun 27, 2023
Updated: Jul 3, 2023
CWE ID 79

Summary

CVE-2023-34836 is a Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281, affecting the Dtltyp and ListName parameters. This vulnerability allows a remote attacker to execute arbitrary code by utilizing a crafted script. The vulnerability has a medium severity rating, with a base score of 5.4 according to NIST's CVSS scoring system. The privileges required for exploitation are low, and user interaction is required for the attack to be successful. The potential danger this vulnerability poses to an organization includes the risk of unauthorized code execution and potential compromise of sensitive information. It is important for affected organizations to promptly remediate this vulnerability by updating to a patched version of the software or applying any available security fixes.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-34836 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options