CVE-2023-37500

HighCVSS 8.1

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

A Persistent Cross-site Scripting (XSS) vulnerability exists on certain pages of Unica Platform. An attacker could hijack a user's session and perform other attacks.

Risk Assessment

This vulnerability could lead to the hijacking of user sessions, posing a serious threat to data security and system integrity.

Recommendation

It is recommended to update Unica Platform to the latest version and implement appropriate security measures against XSS attacks.

Other vulnerabilities in Unica Platform

CVE-2023-37499High
A Persistent Cross-site Scripting (XSS) vulnerability exists in a certain field of the Unica Platform. An attacker could hijack a user's session and perform other attacks.

Original NVD description (English source)

A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform. An attacker could hijack a user's session and perform other attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS