CVE-2023-37499

HighCVSS 8.1

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

A Persistent Cross-site Scripting (XSS) vulnerability exists in a certain field of the Unica Platform. An attacker could hijack a user's session and perform other attacks.

Risk Assessment

This vulnerability could lead to user session hijacking, posing a serious threat to data security and system integrity.

Recommendation

It is recommended to update the Unica Platform to the latest version and implement appropriate filters and security measures to minimize the risk of XSS attacks.

Other vulnerabilities in Unica Platform

CVE-2023-37500High
A Persistent Cross-site Scripting (XSS) vulnerability exists on certain pages of Unica Platform. An attacker could hijack a user's session and perform other attacks.

Original NVD description (English source)

A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform. An attacker could hijack a user's session and perform other attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS