High severity7.1NVD Advisory· Published May 24, 2024· Updated Jun 17, 2026

CVE-2023-49573

Description

A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_command_action in action_value. This vulnerability could allow an attacker to store malicious JavaScript payloads on the system to be triggered when the page loads.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Flexense/Vx Search
cpe:2.3:a:flexense:vx_search:10.2.14:*:*:*:enterprise:*:*:*
Flexense/Vx Search Enterprisellm-fuzzy2 versions
=10.2.14+ 1 more
- (no CPE)range: =10.2.14
- (no CPE)range: 10.2.14

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-flexense-vx-search-enterprisenvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000