Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2023-40397
HistorySep 14, 2023 - 2:25 p.m.

CVE-2023-40397

2023-09-1414:25:05
redhat.com
access.redhat.com
17
vulnerability
webkit
remote execution
javascript
mitigation
red hat product security

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.005

Percentile

76.0%

JSON

A vulnerability was found in WebKit. This flaw allows a remote attacker to cause arbitrary javascript code execution.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Related

ubuntucve 1
cvelist 1
prion 1
nvd 1
osv 4
cve 1
debiancve 1
openvas 4
nessus 11
amazon 1
almalinux 2
oraclelinux 2
gentoo 1
redhat 2
mageia 1
apple 2
ubuntucve
ubuntucve
CVE-2023-40397
2023-09-06 00:00:00
cvelist
cvelist
CVE-2023-40397
2023-09-06 20:48:06
prion
prion
Code injection
2023-09-06 21:15:00
nvd
nvd
CVE-2023-40397
2023-09-06 21:15:13
osv
osv
CVE-2023-40397
2023-09-06 21:15:13
webkit2gtk - security update
2023-08-05 00:00:00
Important: webkit2gtk3 security and bug fix update
2023-11-07 00:00:00
cve
cve
CVE-2023-40397
2023-09-06 21:15:13
debiancve
debiancve
CVE-2023-40397
2023-09-06 21:15:13
openvas
openvas
openSUSE: Security Advisory for webkit2gtk3 (SUSE-SU-2023:3753-1)
2024-03-04 00:00:00
Debian: Security Advisory (DSA-5468-1)
2023-08-07 00:00:00
Mageia: Security Advisory (MGASA-2024-0148)
2024-04-29 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2023:3753-1)
2023-09-26 00:00:00
Amazon Linux 2 : webkitgtk4 (ALAS-2023-2270)
2023-10-05 00:00:00
Oracle Linux 9 : webkit2gtk3 (ELSA-2023-6535)
2023-11-16 00:00:00
amazon
amazon
Important: webkitgtk4
2023-09-27 22:48:00
almalinux
almalinux
Important: webkit2gtk3 security and bug fix update
2023-11-07 00:00:00
Important: webkit2gtk3 security and bug fix update
2023-11-14 00:00:00
oraclelinux
oraclelinux
webkit2gtk3 security and bug fix update
2023-11-11 00:00:00
webkit2gtk3 security and bug fix update
2023-11-17 00:00:00
gentoo
gentoo
WebKitGTK+: Multiple Vulnerabilities
2024-01-05 00:00:00
redhat
redhat
(RHSA-2023:7055) Important: webkit2gtk3 security and bug fix update
2023-11-14 08:44:13
(RHSA-2023:6535) Important: webkit2gtk3 security and bug fix update
2023-11-07 06:07:56
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2024-04-26 09:47:12
apple
apple
About the security content of iOS 16.6 and iPadOS 16.6
2023-07-24 00:00:00
About the security content of macOS Ventura 13.5
2023-07-24 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.005

Percentile

76.0%

JSON
Related for RH:CVE-2023-40397
ubuntucve1cvelist1prion1nvd1osv4cve1debiancve1openvas4nessus11amazon1almalinux2oraclelinux2gentoo1redhat2mageia1apple2