Researchers
Back
Dan-Alexandru Marin
Researcher from
Deloitte Romania
#9643
of 60,387
33.1
Total CVSS
Vulnerabilities
·
4
High
4
PT-2023-25994
2023-08-03
8.8
CVE-2023-37497
Unica
Unica
The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.
PT-2023-25996
2023-08-03
8.1
CVE-2023-37499
Unknown
Unica Platform
A Persistent Cross-site Scripting (XSS) issue can be exploited in a certain field of the Unica Platform, allowing an attacker to hijack a user's session and perform other attacks.
PT-2023-25997
2023-08-03
8.1
CVE-2023-37500
Unknown
Unica Platform
A Persistent Cross-site Scripting (XSS) issue can be carried out on certain pages, allowing an attacker to hijack a user's session and perform other attacks.
PT-2023-25998
2023-08-03
8.1
CVE-2023-37501
Unknown
Unica Campaign
A Persistent XSS issue can be exploited in a certain field, allowing an attacker to hijack a user's session and perform other attacks.