Gxsoftware Xperiencentral
4 CVEs affecting Gxsoftware Xperiencentral. Latest disclosed: 2023-07-26. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43710 | High | 8.8 | 2023-07-26 | Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique tok… |
CVE-2022-43713 | High | 7.5 | 2023-07-26 | Interactive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until 10.35.0 was vulnerable to invalid data input because form validation could be bypa… |
CVE-2022-43712 | Medium | 6.5 | 2023-07-26 | POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user i… |
CVE-2022-43711 | Medium | 6.1 | 2023-07-26 | Interactive Forms (IAF) in GX Software XperienCentral versions 10.29.1 until 10.33.0 was vulnerable to cross site scripting attacks (XSS) because the CSP heade… |