AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-40519

MEDIUM · CVSS 6.1 EPSS 0.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-10-03 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.1. It may be remotely exploitable.

CVE
CVE-2023-40519
Severity
MEDIUM
CVSS
6.1
EPSS
0.37%

Original NVD Description

A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575_ee9195b0, 01.01.01.30097902_fd999e76, and 00.12.01.9565588_1254b459 allows remote attackers to inject arbitrary web script or HTML via the disconnectMessage parameter.