Read the docs

DEXMA

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

DEXMA records in CISA KEV

No DEXMA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

TI-2023-21711 CVE-2023-41089 · GHSA-chwf-pr57-9wm2

Improper Authentication in DEXMA DEXGate

Priority MEDIUM 41

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantag…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00638 Published 2023-10-19 No fix listed CWE-287
TI-2023-22602 CVE-2023-42435 · GHSA-h223-ghxp-jcj3

Cross-Site Request Forgery in DEXMA DEXGate

Priority LOW 37

The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to perform actions with the permissions of a victim user.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00215 Published 2023-10-19 No fix listed CWE-352
Priority LOW 31

The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requests for obtaining the information of the version abo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00483 Published 2023-10-19 No fix listed CWE-200
Priority LOW 29

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could captur…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00292 Published 2023-10-19 No fix listed CWE-319
TI-2023-21030 CVE-2023-40153 · GHSA-pwfh-gp98-cccx

Cross-site Scripting in DEXMA DEXGate

Priority LOW 27

The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00359 Published 2023-10-19 No fix listed CWE-79
Open these records in search →