# CVEs published 2023-06-11

8 CVEs were published on June 11, 2023: 4 critical, 2 high. Days are UTC.

- [CVE-2023-25911](https://cve.now/CVE-2023-25911.md): Authenticated OS Command Injection in Danfoss AK-EM100 (CVSS 9.9, Danfoss AK-EM100)
- [CVE-2023-22583](https://cve.now/CVE-2023-22583.md): SQL Injection in Danfoss AK-EM100 (CVSS 10.0, Danfoss AK-EM100)
- [CVE-2023-22582](https://cve.now/CVE-2023-22582.md): Reflected Cross-Site Scripting in Danfoss AK-EM100 (CVSS 9.0, Danfoss AK-EM100)
- [CVE-2023-22584](https://cve.now/CVE-2023-22584.md): Cleartext credentials in Danfoss AK-EM100 (CVSS 7.5, Danfoss AK-EM100)
- [CVE-2023-22585](https://cve.now/CVE-2023-22585.md): Reflected Cross-Site Scripting in Danfoss AK-EM100 (CVSS 9.0, Danfoss AK-EM100)
- [CVE-2023-22586](https://cve.now/CVE-2023-22586.md): Local File Inclusion in Danfoss AK-EM100 (CVSS 7.7, Danfoss AK-EM100)
- [CVE-2023-25912](https://cve.now/CVE-2023-25912.md): Webreport disclosure to unauthorized actor in Danfoss AK-EM100 (CVSS 5.3, Danfoss AK-EM100)
- [CVE-2023-3192](https://cve.now/CVE-2023-3192.md): Session Fixation in froxlor/froxlor (CVSS 4.2, froxlor/froxlor)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.