What’s Vulnerable › Vulnerabilities

CVE-2023-4093: Reflected and persistent XSS vulnerability in Fujitsu Arconte Áurea

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-19 · updated 2026-06-17
• Weakness: CWE-79

Description

Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to inject malicious JavaScript code, compromise the victim's browser and take control of it, redirect the user to malicious domains or access information being viewed by the legitimate user.

Affected products

• Fujitsu Arconte Áurea: 1.5.0.0

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea
• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea

Get alerted when CVE-2023-4093 or the next vulnerability affects your stack