| CVE-2023-37500 |
A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform
|
8.1
High
|
Aug 3, 2023 |
| CVE-2023-37499 |
A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform
|
8.1
High
|
Aug 3, 2023 |
| CVE-2023-37498 |
A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator
|
8.1
High
|
Aug 3, 2023 |
| CVE-2023-37497 |
The Unica application exposes an API which accepts arbitrary XML input
|
8.1
High
|
Aug 3, 2023 |