CVE-2023-32659
Medium
Description
SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed to email notifications.
SeverityMedium
CVSS6.5
Exploit probability—
ProductSubnet Powersystem Center
PublishedJun 19, 2023
First seenJun 19, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- subnet powersystem_center2020 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| subnet powersystem_center | v < 2020, 2020 | 2020 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.