CVE-2023-43763

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 22, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-437657.5Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server SeCVE-2023-437667.8Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15,CVE-2023-437677.5Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSCVE-2023-437687.5An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause memcached to run ouCVE-2023-437696.3An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There are Unauthenticated RMI Service Ports ExposedCVE-2023-437706.1Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of CVE-2023-437715.5In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.CVE-2023-437755.3Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of tCVE-2023-437766.6Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It wasCVE-2023-437776.5Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the inCVE-2023-43784.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 beforeCVE-2023-437825.5Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created
CVE-2023-43763: Medium severity, CVSS 6.1 | Vulnix