Vulnerabilities > Farsight

DATE CVE VULNERABILITY TITLE RISK
2023-09-03 CVE-2023-37222 Cross-site Scripting vulnerability in Farsight Provide Server 14.5
Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator privilege.
network
low complexity
farsight CWE-79
4.8
2023-02-10 CVE-2023-23286 Cross-site Scripting vulnerability in Farsight Provide Server 14.4
Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the server-log via username field from the login form.
network
low complexity
farsight CWE-79
6.1