Microworld Technologies eScan management console 14.0.1400.2281 vulnerabilities
3 known CVE vulnerabilities in Microworld Technologies eScan management console 14.0.1400.2281, translated and rated.
- CVE-2023-33730Critical
The 'GetUserCurrentPwd' function in Microworld Technologies eScan Management Console contains a privilege escalation vulnerability. This allows a remote attacker to retrieve the password of any user (admin or normal) in plain text format.
- CVE-2023-33731Medium
The eScan management console by Microworld Technologies version 14.0.1400.2281 has a reflected Cross Site Scripting (XSS) vulnerability in the view dashboard detail feature. This allows a remote attacker to inject arbitrary code via the URL.
- CVE-2023-33732Medium
The New Policy form in the Microworld Technologies eScan management console has a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.