CVE-2023-4100 Multiple vulnerabilities in IDM Sistemas QSige

HighCVSS 8.2 EPSS 0.38%

Published: 2023-10-03 14:22
Updated: 2026-06-17 09:37
Exploit status: No public exploit known

Description

Allows an attacker to perform XSS attacks stored on certain resources. Exploiting this vulnerability can lead to a DoS condition, among other actions.

Affected products

Product	Affected versions	Fixed in
IDM Sistemas QSige QSige	= 3.0.0.0	No fix listed
qsige	= 3.0.0.0	No fix listed

References

www.incibe.es third-party-advisory

CVSS v3.1

8.2 High

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: Low
User Interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: High

All scores (3)

v3.1 6.5 · incibe
v3.1 8.2 · nvd@nist.gov
v3.1 6.5 · cve-coordination@incibe.es

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.38% (percentile 32.7)
CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.