Farsight

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Farsight records in CISA KEV

No Farsight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Provide Server 2 records MEDIUM

Records

2 records in Provide Server · all components

TI-2023-09173 CVE-2023-23286 · GHSA-g55m-fv7q-p3f5

Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to…

MEDIUM 62

Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the server-log via username field from the login form.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02628 Published 2023-02-10 No fix listed CWE-79

TI-2023-18855 CVE-2023-37222 · GHSA-v2vm-mr48-vqrr

Cross-site scripting in Farsight Tech Nordic AB ProVide

LOW 22

Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator privilege.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00341 Published 2023-09-03 Fixed in Upgrade to version 14.5 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0