Skip to content
OpenAdvisories
Medium ICSA-23-166-01 2 CVEs

SUBNET PowerSYSTEM Center

Published Jun 15, 2023 · Updated Jun 15, 2023

Vendor: Subnet Solutions Product: PowerSYSTEM Center

Summary

Successful exploitation of these vulnerabilities could allow an attacker to upload malicious scripts or perform a denial-of-service type attack.

Vulnerabilities 2

  • Medium 6.5
    CVE-2023-32659

    SUBNET PowerSYSTEM Center Cross-site Scripting

    SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic files that could propagate out of the system and reach users who are subscribed t…

    Subnet Solutions PowerSYSTEM Center
  • Medium 6.1
    CVE-2023-29158

    SUBNET PowerSYSTEM Center Authentication Bypass by Capture-replay

    SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity.

    Subnet Solutions PowerSYSTEM Center

Revision history

  1. #1

    Initial Publication

References