Skip to content
fr Sign in
8.3 High

CVE-2023-35796 A vulnerability has been identified in SINEMA Server V14 (All versions)

Description

A vulnerability has been identified in SINEMA Server V14 (All versions). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting (XSS) attack that may lead to arbitrary code execution with `SYSTEM` privileges on the application server. (ZDI-CAN-19823)

Affected products and versions

Product Affected versions Fixed in
SINEMA Server V14 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SINEMA Server V14

The 5 CVEs of SINEMA Server V14 →
CVE-2022-24281 A vulnerability has been identified in SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions) 7.2 High CVE-2022-24282 A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3),… 7.2 High CVE-2022-25311 A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3),… 7.3 High CVE-2021-3712 ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding… Not rated
Track this CVE