Back to Database
Status published
Medium
CVE-2023-40153
Cross-site Scripting in DEXMA DEXGate
Vulnerability Description
The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to introduce arbitrary Java Script by injecting an XSS payload into the 'hostname' parameter of the vulnerable software.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40153
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Aarón Flecha Menéndez of S21sec reported these vulnerabilities to CISA.
More from DEXMA
View All →CVE-2023-42666
Exposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGate
Medium
5.3
CVE-2023-42435
Cross-Site Request Forgery in DEXMA DEXGate
Medium
5.5
CVE-2023-41089
Improper Authentication in DEXMA DEXGate
High
8
CVE-2023-41088
Cleartext Transmission of Sensitive Information in DEXMA DEXGate
Medium
6.3
Affected Vendor
DEXMA
View all reports →Affected Software
DexGate
Vulnerable Versions:
20130114
Timeline
Official Publish:
October 19th, 2023
Last Modified:
September 11th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N