CVE-2023-3937CWE-79

Cross site scripting vulnerabilities in Snow License Manager

Medium · published August 11, 2023

CVSS v3.1
4.8
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00327 · 24.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-08-11T11:28Z
EPSS history
Timeline
  • 11 AUG 11:28Z
    Cross site scripting vulnerabilities in Snow License Manager
    cvelistv5