CVE-2023-37499

Summary

CVE-2023-37499 is a Persistent Cross-site Scripting (XSS) vulnerability identified in the Unica Platform. This issue allows an attacker to inject malicious scripts into a specific field, which can then be executed in a user's browser when they view a compromised page. The attacker could potentially hijack a user's session and carry out further attacks, such as data theft or unauthorized system access. Users are advised to update their Unica Platform installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.