Vulnerabilities (CVE)

Filtered by vendor Gxsoftware Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-43710 1 Gxsoftware 1 Xperiencentral 2023-08-04 N/A 8.8 HIGH
Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site request forgery (CSRF) because the unique token could be deduced using the names of all input fields.
CVE-2022-43713 1 Gxsoftware 1 Xperiencentral 2023-08-04 N/A 7.5 HIGH
Interactive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until 10.35.0 was vulnerable to invalid data input because form validation could be bypassed.