CVE-2023-49574: 
VX Search vulnerability analysis and mitigation

CVE-2023-49574 is a persistent Cross-Site Scripting (XSS) vulnerability affecting VX Search Enterprise version 10.2.14. The vulnerability was discovered in May 2024 and allows an attacker to execute persistent XSS through the /add_job endpoint in the job_name parameter (INCIBE Notice, NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.1 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. It is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation). The vulnerability specifically affects the job_name parameter in the /add_job endpoint, allowing attackers to store malicious JavaScript payloads that execute when the page loads (INCIBE Notice).

When exploited, this vulnerability allows attackers to store malicious JavaScript payloads on the system that are triggered upon page load. This can lead to compromised confidentiality, integrity, and availability with low impact levels as indicated by the CVSS score (NVD).

The vulnerability requires no privileges (PR:N) and low attack complexity (AC:L) but does need user interaction (UI:R) to be exploited. The attack can be launched from the network (AV:N) with changes potentially affecting components beyond the security scope of the vulnerable component (S:C) (INCIBE Notice).

As of the vulnerability disclosure, no official fix or mitigation has been reported by the vendor (INCIBE Notice).