CVE-2023-39369

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79)

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
StarTrinitySoftswitch>= version 2023-02-16, < Upgrade to version 2023-07-27

References

Timeline

Published
Sep 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-39374.8Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows aCVE-2023-393705.4StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)CVE-2023-393716.1StarTrinity Softswitch version 2023-02-16 - Open Redirect (CWE-601)CVE-2023-393728.8StarTrinity Softswitch version 2023-02-16 - Multiple CSRF (CWE-352)CVE-2023-393736.5A Hyundai model (2017) - CWE-294: Authentication Bypass by Capture-replay.CVE-2023-393747.8ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path ElementCVE-2023-393759.8SiberianCMS - CWE-274: Improper Handling of Insufficient PrivilegesCVE-2023-393766.5SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the networkCVE-2023-393777.2SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to uploCVE-2023-393788.8SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated userCVE-2023-393797.5Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. AsCVE-2023-39384.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZkTeco-based OEM devices allows an a
CVE-2023-39369: Medium severity, CVSS 6.1 | Vulnix