What’s Vulnerable › Vulnerabilities

CVE-2023-51946

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-19 · updated 2026-07-09
• Weakness: CWE-79

Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML.

Affected products

• Actidata Actinas Sl 2U-8 Rdx Firmware: 3.2.03-sp1

References

• https://github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51946/README.md
• https://www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx
• https://github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51946/README.md
• https://www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx

Get alerted when CVE-2023-51946 or the next vulnerability affects your stack