PT-2023-28676 · Dell · Dell Unity

CVE-2023-43065 · Publicado 2023-10-23 · Atualizado 2023-10-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dell Unity versions prior to 5.3

Description A Cross-site scripting issue allows a low-privileged authenticated attacker to exploit and obtain escalated privileges.

Recommendations For versions prior to 5.3, update to version 5.3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-43065

Produtos afetados

Dell Unity

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-43065 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-43065 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1716493298334863710 · Publicação no Twitter
• https://dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities · Aviso do Fabricante
• https://t.me/cibsecurity/72765 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1716473691582673213 · Publicação no Twitter