Farsight Provide Server — known CVE vulnerabilities

Every CVE whose affected-product data names Farsight Provide Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-23286 — CVSS 6.1 (medium): Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the server-log via…
• CVE-2023-37222 — CVSS 4.8 (medium): Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator…