1. Home
  2. CVE Database
  3. CVE-2023-4802
MEDIUM · 4.8

CVE-2023-4802

A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to ru...

Vulnerability Description

A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to 7.14.3.69 are affected.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
ProofpointInsider Threat Management< 7.14.3.69

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2023-4802?

CVE-2023-4802 is a vulnerability with a CVSS score of 4.8 (MEDIUM). A reflected cross-site scripting vulnerability in the UpdateInstalledSoftware endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to ru...

How severe is CVE-2023-4802?

CVE-2023-4802 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4802?

Check the references section above for vendor advisories and patch information. Affected products include: Proofpoint Insider Threat Management.