Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-09	CVE-2023-37790	Cross-site Scripting vulnerability in Broadcom Clarity 14.3.0.298 Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function. network low complexity broadcom CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.