CVE-2023-32969CWE-79

Network & Virtual Switch

Medium · published March 8, 2024

CVSS v3.1
4.9
EPSS
0%
Percentile
25.4
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network.

We have already fixed the vulnerability in the following versions:

QuTScloud c5.1.5.2651 and later

QTS 5.1.4.2596 build 20231128 and later

QuTS hero h5.1.4.2596 build 20231128 and later

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-03-08T16:17Z
EPSS history
Timeline
  • 08 MAR 16:17Z
    Network & Virtual Switch
    cvelistv5