CVE-2023-43763
6.1 mediumEPSS 0.4%
Medium (6.1) in withsecure f-secure policy manager. EPSS 0.4% chance of exploitation in the next 30 days.
Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux.
Severity
CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- withsecure:f-secure_policy_manager
References
Check your stackJSON