Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-05-31	CVE-2023-33730	Cleartext Transmission of Sensitive Information vulnerability in Escanav Escan Management Console 14.0.1400.2281 Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format. network low complexity escanav CWE-319 critical	9.8
2023-05-17	CVE-2023-31703	Cross-site Scripting vulnerability in Escanav Escan Management Console 14.0.1400.2281 Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter. network low complexity escanav CWE-79 critical	9.0