CVE Catalog

CVE-2023-34734

MediumCVSS 4.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

27th percentile - higher than 27% of all known CVEs

Summary

Annet AC Centralized Management Platform version 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject malicious code that will be stored and executed in users' browsers.

Risk Assessment

Exploitation of this vulnerability may lead to session data theft and account takeover. It can also result in malware or other attacks on users.

Recommendation

It is recommended to update the Annet AC Centralized Management Platform to the latest version to mitigate this vulnerability. Additionally, implementing security mechanisms against XSS attacks is advisable.

Original NVD description (English source)

Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS) .

Vulnerability data from NVD (NIST) · CISA KEV · EPSS