{"id":"CVE-2023-4803","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-4803","generatedAt":"2026-10-28T02:16:18.994Z","title":"A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console…","description":"A reflected cross-site scripting vulnerability in the WriteWindowTitle endpoint of the Insider Threat Management (ITM) Server's web console could be used by an authenticated administrator to run arbitrary javascript within another web console administrator's browser. All versions prior to 7.14.3.69 are affected.","published":"2023-09-13T16:15:11.000Z","lastModified":"2026-06-17T06:38:37.000Z","status":"Modified","sourceIdentifier":"security@proofpoint.com","cvss":{"version":"3.1","score":4.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["proofpoint/insider threat management"],"epss":{"score":0.00351,"percentile":0.28533,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-007","tags":["Broken Link"],"source":"security@proofpoint.com"},{"url":"https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-0007","tags":["Vendor Advisory"],"source":"nvd@nist.gov"},{"url":"https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2023-007","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-4803","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}