CVE-2023-40153

Published Oct 19, 2023

Last updated a year ago

CVSS medium 6.1

Overview

Description: The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software.
Source: ics-cert@hq.dhs.gov
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.1
Impact score: 2.7
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-79
ics-cert@hq.dhs.gov: CWE-79

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dexma:dexgate:20130114:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B1220960-8C57-4BB1-9871-882D2E272F39"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References