Datev

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Datev records in CISA KEV

No Datev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Base System 1 record MEDIUM Eg Personal-management System Comfort/comfort Plus 1 record LOW Grundpaket Basis 1 record MEDIUM Nutzungskontrolle 1 record LOW

Records

1 record in Eg Personal-management System Comfort/comfort Plus · all components

TI-2023-16521 CVE-2023-33387 · GHSA-9j8v-h9mr-5mjx

A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management…

LOW 28

A reflected cross-site scripting (XSS) vulnerability in DATEV eG Personal-Management System Comfort/Comfort Plus v15.1.0 to v16.1.1 P4 allows attackers to steal targeted users' login data by sending a crafted link.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00513 Published 2023-06-22 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0