CVE Catalog
CVE-2023-37222
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk0.30%
21th percentile - higher than 21% of all known CVEs
Summary
ProVide version 14.5 by Farsight Tech Nordic AB contains multiple XSS vulnerabilities (CWE-79) that can be exploited by a user with administrator privileges.
Risk Assessment
Exploitation of these vulnerabilities may lead to unauthorized access to data and potential takeover of the system by an attacker.
Recommendation
It is recommended to update ProVide software to the latest version to mitigate these vulnerabilities and to restrict access to administrator accounts.
Original NVD description (English source)
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator privilege.